Ares(2020)3432413
ITDB - Web INF
3rd Quarterly Progress Report
Reporting Period:
16 April 2014 – 15 July 2014
Prepared For JRC Contract No. 226425-2013 10 KAR DE: Incident and Trafficking
Database (ITDB) Online Incident Notification Forms (Web-INF) System
July 16, 2014
ITDB - WebINF - First Quarterly Progress Report - 13 July 2020
1 Technical Progress
1.1. Achievements
As per the project plan, the 3rd quarter included work on preparing the ITDB WebINF system to all
users and start working on the software solution for exporting WebINF data to the ITDB database.
Although not part of the project plan, during this period the developer of the WebINF system had
training courses for Palantir and Web Applications Security Testing, as it was approved in the project
specification. In addition, URS obtained the IT equipment that the IAEA requested and the project
sponsor (JRC) approved. The equipment includes 4 laptops, 6 iPads, 1 Samsung Galaxy tablet and 1
Microsoft Surface Pro tablet.
The release of the ITDB WebINF system to al ITDB Users happened during this time period but later
than the initially planned date of May 21, 2014. Instead the system was released on July 4, 2014, or
six weeks later than the planned date. Postponing the release date was requested by the IAEA
because they had decided to make some changes to the Tab 3 part of the WebINF system before
releasing the system to al the users. The six weeks delay includes the 2 weeks that the developer
was away from the IAEA for the IT training courses. It was suggested to release the system as
planned and then release a new version with the requested changes, but the IAEA felt more
confident to have the changes implemented before the system is first viewed by the ITDB POCs.
The programmer of the WebINF system attended a three day Palantir developer training course in
the Palantir offices in Washington, USA. The first day included a high level introduction of the
PALANTIR system and it was explained how the various components of the system interoperate.
Some of the topics discussed were Palantir Workspace, Dynamic Ontology, Server Architecture,
Security Overview, and Palantir Extensibility. The second covered a more hands on approach
whereas there were some data migration exercises that explain various methods of importing data
into Palantir, including importing of simple lists and of structured (related) data. During the last day
there were also some exercises through which it was explained how the Palantir system can be
customized and extended. After the training course, the developer has a much better understanding
of the strengths of the Palantir system and how it can be utilized for the needs of the ITDB staff at
IAEA.
The programmer also attended another training course in Berlin, Germany titled Web App
Penetration Testing and Ethical Hacking. This course was very technical in nature and it is designed
for people who are either developing web applications (like the ITDB WebINF) or are working on
securing the required infrastructure needed to run a web application. The 6 days training course was
divided into four segments that cover the different processes involved in finding vulnerabilities in
web applications (reconnaissance, mapping, discovery, exploitation). Each process was explained as
to why it is important and the latest tools that hackers or security professionals use were
demonstrated. The last day of the training course was a so called “capture the flag” event during
which the students had to apply the knowledge obtained in the course in a control ed environment.
Finally, during Q3 of the project, some of the work on the data export interfaces for WebINF was
started and the programmer will continue working on it in Q4 as well.
ITDB - WebINF - First Quarterly Progress Report - 13 July 2020
Appendix – Project Plan
