Release 0.1.0
authorSangwan Kwon <sangwan.kwon@samsung.com>
Tue, 28 Apr 2020 04:28:17 +0000 (13:28 +0900)
committer권상완/Security 2Lab(SR)/Engineer/삼성전자 <sangwan.kwon@samsung.com>
Tue, 28 Apr 2020 07:13:55 +0000 (16:13 +0900)
- Minimize code sizes of osquery upstream (15% -> 7%)
- Replace python-jinja2 (compiletime) to table-plugin (runtime)

Signed-off-by: Sangwan Kwon <sangwan.kwon@samsung.com>
CMake/Definition.cmake
README.md
doc/comparision-with-osquery.md
packaging/vist.spec

index d11b5e9..1d32e69 100644 (file)
@@ -1,4 +1,4 @@
-#  Copyright (c) 2019 Samsung Electronics Co., Ltd All Rights Reserved
+#  Copyright (c) 2019-present Samsung Electronics Co., Ltd All Rights Reserved
 #
 #  Licensed under the Apache License, Version 2.0 (the "License");
 #  you may not use this file except in compliance with the License.
@@ -12,7 +12,7 @@
 #  See the License for the specific language governing permissions and
 #  limitations under the License
 
-SET(VERSION "0.0.0")
+SET(VERSION "0.1.0")
 SET(OSQUERY_VERSION "4.0.0")
 
 SET(RO_DIR "/usr/share")
index a5e6cf7..c405379 100644 (file)
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 <p align="center">
 <b> ViST, Virtual Security Table &#127912 </b><br>
-Query-based Universial Security API &#128196<br>
+Query-based Unified Security API Platform &#128196<br>
 of the developer, by the developer, for the developer &#128187
 </p>
 
@@ -24,7 +24,7 @@ more intuitively than other opensource projects.
 Refer [this](https://github.sec.samsung.net/RS7-SECIOTSW/tizen-osquery/tree/master/src/vist/query-builder)
 to compare ours and other opensources.
 
-We believe that ViST makes security software usable and universial.
+We believe that ViST makes security software usable and universal.
 
 # Design
 Our design philoshophy is "Make usable and robust security framework.".
index 2ff4b9f..ff4be01 100644 (file)
@@ -14,8 +14,8 @@ more efficient interface from this different perspective.
 | Perspective | system developer | system administrator |
 | Project Type | SAM | OPENM |
 | Component | daemon, **library** | daemon, shell |
-| Additional<br>dependencies<br>(without tizen) | jinja2-python<br>rapidjson | jinja2-python<br>rapidsjon<br>lz4<br>zstd<br>rocksdb<br>thrift<br>|
-| Code Lines | 35K (18K - osquery) | 120K |
+| Additional<br>dependencies<br>(without tizen) | rapidjson | jinja2-python<br>rapidsjon<br>lz4<br>zstd<br>rocksdb<br>thrift<br>|
+| Code Lines | 16K (8K - osquery) | 120K |
 
 ---
 
@@ -51,38 +51,39 @@ SUM:                              1386          28549          29233         119
 
 ---
 
-## ViST 0.0.1
+## ViST 0.1.0
 
 ```
+$ cloc . --exclude-dir=third-party
 -------------------------------------------------------------------------------
 Language                     files          blank        comment           code
 -------------------------------------------------------------------------------
-C++                            164           4135           3174          18280
-C/C++ Header                   165           4518           8159          15806
-CMake                           38            160            495            632
-Markdown                         7             70              0            463
-Python                           2            104             71            448
+C++                            118           2554           1910          10482
+C/C++ Header                   101           1714           3371           4733
+Markdown                         8             77              0            488
+CMake                           30            127            411            472
 Dockerfile                       1             12              9             34
 SQL                              1              8             15             30
 make                             1              4              0             13
 XML                              1              0              0              1
 -------------------------------------------------------------------------------
-SUM:                           380           9011          11923          35707
+SUM:                           261           4496           5716          16253
 -------------------------------------------------------------------------------
 ```
 
 ---
 
-## osquery in ViST (about 15% of osquery)
+## osquery in ViST (about 7% of osquery)
 
 ```
+$ cloc src/osquery/
 -------------------------------------------------------------------------------
 Language                     files          blank        comment           code
 -------------------------------------------------------------------------------
-C++                             96           2903           2076          14170
-C/C++ Header                    71           1398           4102           3335
-CMake                           12             45            145            193
+C++                             49           1274            787           6192
+C/C++ Header                    41            844           2320           2094
+CMake                            5             25             67             94
 -------------------------------------------------------------------------------
-SUM:                           179           4346           6323          17698
+SUM:                            95           2143           3174           8380
 -------------------------------------------------------------------------------
 ```
index c987e48..8c282bc 100644 (file)
@@ -1,8 +1,8 @@
 Name: vist
-Version: 0.0.0
+Version: 0.1.0
 Release: 0
 License: Apache-2.0 and GPLv2 and MIT
-Summary: ViST(Virtual Security Table) is a security monitoring framework using SQL query.
+Summary: ViST(Virtual Security Table) is an unified security API platform based virtual tables.
 Url: https://github.com/facebook/osquery
 Group: Security/Libraries
 Source0: file://%{name}-%{version}.tar.gz
@@ -13,7 +13,6 @@ BuildRequires: cmake
 # osquery BRs
 BuildRequires: glog-devel
 BuildRequires: boost-devel
-BuildRequires: python-jinja2
 # vist BRs
 BuildRequires: gflags-devel
 BuildRequires: pkgconfig(dlog)
@@ -42,7 +41,7 @@ Requires: libsystemd
 %global vist_script_dir %{vist_ro_dir}/script
 
 %description
-ViST provides APIs for monitoring and controlling security resources.
+ViST provides unified interface of security functions.
 ViST views security resources as virtual tables and manipulates them through SQL queries.
 ViST adopts a plug-in architecture and uses osquery as the query analysis engine.