Process Query Systems -- Downloads

Downloads

Process Query Systems (PQS) are a new kind of information retrieval technology in which user queries are expressed as process descriptions. The goal of a PQS is to detect the processes using a datastream or database of events that are correlated with the processes' states. This is in contrast with most traditional database query processing, information retrieval systems and web search engines in which user queries are typically formulated as Boolean expressions.

License

This software in source and/or binary forms is provided for demonstration purposes and personal use only. Commercial use of this software is prohibited. You may not modify, copy, duplicate, reproduce, license or sublicense this software.

This software is distributed "as is" and WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Linux:

Linux distribution. Includes PQSNet front-end and ModelBuilder. [tar/gzip]
Linux/Solaris installer for sensors. Includes Snort, Apache and Samhain sensors. Snort, Apache and/or Samhain must be downloaded and installed separately. [text/bash]

Windows:

Windows installer. Installs PQSNet front-end, ModelBuilder and Sensor Registry for Windows. [exe]
Sensor Registry (for Windows) only. [zip]

Installation

Watch or download the Windows installation demo video (AVI format, 46 MB)

PQS Sensors

The sensors included in this distribution are for Linux & Solaris operating systems only. To install sensors on a host device:

Download the sensor-installer file.
Run the executable with superuser privileges (i.e. 'su' first then './sensor-installer' or 'sudo ./sensor-installer')
Follow the prompts. You will need to know the location of the system logs the sensors need and the address of the host where the sensor registry will be installed.
Sensors will be installed in '/opt/pqsnet/'. Use '/opt/pqsnet/run-*-sensor' to start the sensors.

Sensor Registry

The sensor registry is responsible for keeping track of which deployed sensors are alive. While not required, the sensor registry is needed by the TRAFEN wizard for starting PQSNet instances. The sensor registry has versions for Linux/Solaris as well as Windows.

The Linux/Solaris version may be installed during the installation of sensors as described above.

The Windows version of the sensor registry can be found as a separate download or installed as part of the PQSNet front-end.

To install/run on windows as a separate download:

Unzip file contents and run 'sreg_server.exe'.

Front-Ends

Windows: Download and run the Windows installer. Follow the installation windows to install PQSNet on your computer.

Linux: Unzip downloaded archive into desired directory. Use included scripts to run the PQSNet GUI or the ModelBuilder.

Accessing sample observations from PQSNET.NET

We have deployed dummy sensors to provide sample observations for users trying out the PQSNet software. Follow these steps to connect to our sensors.

Start an instance with the wizard.
On the sensor selection page, connect to 'trafena.pqsnet.net' on port 52601. Click 'Refresh' if needed to get the list of sensors.
Add the Snort and/or Dragon sensor(s). Click 'Next'.
Pick subscribers for the sensors you chose. Click 'Next'.
Select your models and start the instance.

This research program is a part of the Institute for Security Technology Studies, supported under Award number 2000-DT-CX-K001 from the U.S. Department of Homeland Security, Science and Technology Directorate. Points of view in this web site are those of the authors and do not necessarily represent the official position of the U.S. Department of Homeland Security or the Science and Technology Directorate. Process Query Systems, LLC.