NANOG Meeting Presentation Abstract

Using Topological Mapping to Manage and Secure Large Networks
Meeting:	NANOG23
Date / Time:	2001-10-23 3:45pm - 4:00pm
Room:	OCC East
Presenters:	Speakers: Karl Siil, Lumeta Karl Siil, Director of Professional Services at Lumeta Corporation, has been working in network and system security for the past 20 years. Prior to Lumeta, Mr. Siil spent over 10 years at AT&T Bell Labs developing secure operating systems and networks for commercial and government clients, and three more years running the security practices of various global consulting companies.
Abstract:	The security of a network infrastructure, particularly an extensive one, relies on the proper management of the network address space, routes, and external connections. If network managers don\'t know what they have, how it\'s connected, and what else it\'s connected to, they can\'t know if it is secure. The Internet Mapping Project, started by Bill Cheswick at Bell Labs, has been collecting intriguing topological information about the Internet since August of 1998. In the last year, this technology has been applied to large corporate intranets and ISPs with equally illuminating results. The presentation introduces the analysis and interpretation of such maps and what can be determined from such analysis. The larger the network, the more useful we find this analysis to be for identifying single points of failure, address squatting (the use of another organization\'s address space within one\'s own network), legacy connections to divested networks or former business partners, and outright security violations. Real-world anonymized examples will be part of the presentation.
Files:	Karl Siil Presentation(PPT) Using Topological Mapping to Manage and Secure Large Networks
Sponsors:	None.

Back to NANOG23 agenda.

NANOG23 Abstracts

• Show All

• IP Routing Protocol Scalability: Theory and Examples
  Speakers:
  Alvaro Retana, Cisco Systems;

• ISP Security - Real World Techniques II
  Speakers:
  Barry Raveendran GreeneCisco Systems; .
  Chris MorrowUUNET/Verizon; .
  Brian W. GemberlingUUNET; .
  

• ISP Security - Real World Techniques II
  Speakers:
  Barry Raveendran GreeneCisco Systems; .
  Chris MorrowUUNET/Verizon; .
  Brian W. GemberlingUUNET; .
  

• ISP Security - Real World Techniques II
  Speakers:
  Barry Raveendran GreeneCisco Systems; .
  Chris MorrowUUNET/Verizon; .
  Brian W. GemberlingUUNET; .
  

• BGP Multihoming Guide
  Speakers:
  Philip SmithCisco Systems; .
  

• Packets and Photons: The Emerging Two-Layer Network
  Speakers:
  Dan Lockwood, Juniper;

• The Internet Under Stress
  Speakers:
  Peter H. Salus, Matrix;

• What Worked and What Didn\'t: 9/11
  Speakers:
  Sean DonelanDonelan.com; .
  

• Multicasting Worked on 9/11
  Speakers:
  Marshall Eubanks, Multicast Technologies; Prashant RajvaidyaUC Santa Barbara; .
  Rich MavrogeanesVbrick; .
  

• Multicasting Worked on 9/11
  Speakers:
  Marshall Eubanks, Multicast Technologies; Prashant RajvaidyaUC Santa Barbara; .
  Rich MavrogeanesVbrick; .
  

• Multicasting Worked on 9/11
  Speakers:
  Marshall Eubanks, Multicast Technologies; Prashant RajvaidyaUC Santa Barbara; .
  Rich MavrogeanesVbrick; .
  

• Trends in Denial of Service Attack Technology
  Speakers:
  Kevin HouleCERT; .
  

• Recent Internet Worms: Who Are the Victims, and How Good Are We at Getting the Word Out?
  Speakers:
  David MooreCAIDA; .
  

• DoS Attacks in the Real World
  Speakers:
  Karthik Arumugham, Global NAPs; Steven Schechter, Globix; Jason Slagle, Toledo Internet Access;

• DoS Attacks in the Real World
  Speakers:
  Karthik Arumugham, Global NAPs; Steven Schechter, Globix; Jason Slagle, Toledo Internet Access;

• DoS Attacks in the Real World
  Speakers:
  Karthik Arumugham, Global NAPs; Steven Schechter, Globix; Jason Slagle, Toledo Internet Access;

• Diversion and Sieving Techniques to Defeat
  Speakers:
  Yehuda Afek, Tel-Aviv Univ. & WANWall; Anat Bremler-BarrTel-Aviv Univ. & WANWall; .
  Hank NussbacherWANWall; .
  Danny TouitouWANWall; .
  

• Diversion and Sieving Techniques to Defeat
  Speakers:
  Yehuda Afek, Tel-Aviv Univ. & WANWall; Anat Bremler-BarrTel-Aviv Univ. & WANWall; .
  Hank NussbacherWANWall; .
  Danny TouitouWANWall; .
  

• Diversion and Sieving Techniques to Defeat
  Speakers:
  Yehuda Afek, Tel-Aviv Univ. & WANWall; Anat Bremler-BarrTel-Aviv Univ. & WANWall; .
  Hank NussbacherWANWall; .
  Danny TouitouWANWall; .
  

• Diversion and Sieving Techniques to Defeat
  Speakers:
  Yehuda Afek, Tel-Aviv Univ. & WANWall; Anat Bremler-BarrTel-Aviv Univ. & WANWall; .
  Hank NussbacherWANWall; .
  Danny TouitouWANWall; .
  

• NOBAD: Network-Oriented Basic Anomaly Detection
  Speakers:
  Jonas M. Luster, d-fensive.com;

• Designing a Testbed for Evaluating DDoS Defense Research
  Speakers:
  Wes Hardaker, NAI Labs;

• Inter-City MAN Services Using MPLS
  Speakers:
  Pascal Menezes, Terabeam;

• MPLS in Perspective
  Speakers:
  Kireeti Kompella, Juniper;

• Peering BOF IV
  Moderators:
  Bill NortonEquinix; .
  

• Enhancing the Internet\'s Administrative Look-up Service
  Speakers:
  Mark KostersVeriSign Applied Research; .
  Andrew NewtonVeriSign Applied Research; .
  

• Enhancing the Internet\'s Administrative Look-up Service
  Speakers:
  Mark KostersVeriSign Applied Research; .
  Andrew NewtonVeriSign Applied Research; .
  

• ARIN Open Mike Session
  Speakers:
  Richard JimmersonARIN; .
  

• Global Routing Instabilities During Code Red II and Nimda Worm Propagation
  Speakers:
  Jim CowieRenesys Corporation; .
  Andy OgielskiRenesys Corporation; .
  

• Global Routing Instabilities During Code Red II and Nimda Worm Propagation
  Speakers:
  Jim CowieRenesys Corporation; .
  Andy OgielskiRenesys Corporation; .
  

• Shining Light on Dark Internet Address Space
  Speakers:
  Craig LabovitzMerit Network/Arbor Networks; .
  Abha AhujaMerit Network/Arbor Networks; .
  Presented by Rob MalanArbor Networks; .
  

• Shining Light on Dark Internet Address Space
  Speakers:
  Craig LabovitzMerit Network/Arbor Networks; .
  Abha AhujaMerit Network/Arbor Networks; .
  Presented by Rob MalanArbor Networks; .
  

• Shining Light on Dark Internet Address Space
  Speakers:
  Craig LabovitzMerit Network/Arbor Networks; .
  Abha AhujaMerit Network/Arbor Networks; .
  Presented by Rob MalanArbor Networks; .
  

• BGP Multiple Origin AS (MOAS) Conflicts
  Speakers:
  Xiaoliang ZhaoNCSU; .
  Dan MasseyUSC/ISI; .
  Allison MankinUSC/ISI; .
  S. Felix WuUC Davis; .
  Lan WangUCLA; .
  Dan PeiUCLA; .
  Lixia ZhangUCLA; .
  

• BGP Multiple Origin AS (MOAS) Conflicts
  Speakers:
  Xiaoliang ZhaoNCSU; .
  Dan MasseyUSC/ISI; .
  Allison MankinUSC/ISI; .
  S. Felix WuUC Davis; .
  Lan WangUCLA; .
  Dan PeiUCLA; .
  Lixia ZhangUCLA; .
  

• BGP Multiple Origin AS (MOAS) Conflicts
  Speakers:
  Xiaoliang ZhaoNCSU; .
  Dan MasseyUSC/ISI; .
  Allison MankinUSC/ISI; .
  S. Felix WuUC Davis; .
  Lan WangUCLA; .
  Dan PeiUCLA; .
  Lixia ZhangUCLA; .
  

• BGP Multiple Origin AS (MOAS) Conflicts
  Speakers:
  Xiaoliang ZhaoNCSU; .
  Dan MasseyUSC/ISI; .
  Allison MankinUSC/ISI; .
  S. Felix WuUC Davis; .
  Lan WangUCLA; .
  Dan PeiUCLA; .
  Lixia ZhangUCLA; .
  

• BGP Multiple Origin AS (MOAS) Conflicts
  Speakers:
  Xiaoliang ZhaoNCSU; .
  Dan MasseyUSC/ISI; .
  Allison MankinUSC/ISI; .
  S. Felix WuUC Davis; .
  Lan WangUCLA; .
  Dan PeiUCLA; .
  Lixia ZhangUCLA; .
  

• BGP Multiple Origin AS (MOAS) Conflicts
  Speakers:
  Xiaoliang ZhaoNCSU; .
  Dan MasseyUSC/ISI; .
  Allison MankinUSC/ISI; .
  S. Felix WuUC Davis; .
  Lan WangUCLA; .
  Dan PeiUCLA; .
  Lixia ZhangUCLA; .
  

• BGP Multiple Origin AS (MOAS) Conflicts
  Speakers:
  Xiaoliang ZhaoNCSU; .
  Dan MasseyUSC/ISI; .
  Allison MankinUSC/ISI; .
  S. Felix WuUC Davis; .
  Lan WangUCLA; .
  Dan PeiUCLA; .
  Lixia ZhangUCLA; .
  

• The Impact of BGP Misconfiguration on Connectivity
  Speakers:
  Ratul MahajanUniversity of Washington; .
  David WetherallUniversity of Washington; .
  Tom AndersonUniversity of Washington; .
  

• The Impact of BGP Misconfiguration on Connectivity
  Speakers:
  Ratul MahajanUniversity of Washington; .
  David WetherallUniversity of Washington; .
  Tom AndersonUniversity of Washington; .
  

• The Impact of BGP Misconfiguration on Connectivity
  Speakers:
  Ratul MahajanUniversity of Washington; .
  David WetherallUniversity of Washington; .
  Tom AndersonUniversity of Washington; .
  

• Analysis of RIPE / RIS Project\'s BGP Data: CIDR at Work
  Speakers:
  Cengiz Alaettinoglu, Packet Design;

• XML-based Network Management
  Speakers:
  Rob Enns, Juniper;

• Using Topological Mapping to Manage and Secure Large Networks
  Speakers:
  Karl Siil, Lumeta;