1 / 11

Enabling Network Security

Enabling Network Security. Ashraf Matrawy, Ph.D., P.Eng., SMIEEE Carleton School of IT and the Department of Systems and Computer Engineering RCTI workshop on “ Networks for Defence” February 1, 2008. Outline. Introduction and Motivation Designing NDoS-Resilient Data Networks

nigel
Download Presentation

Enabling Network Security

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Enabling Network Security Ashraf Matrawy, Ph.D., P.Eng., SMIEEE Carleton School of IT and the Department of Systems and Computer EngineeringRCTI workshop on “Networks for Defence” February 1, 2008

  2. Outline • Introduction and Motivation • Designing NDoS-Resilient Data Networks • Network Security Evaluation: Case study of Intrusion Detection Systems • Investigation of stealthy worm attacks

  3. Motivation • The IP model was not designed with security in-mind • Open, simple core • Innovation and complexity at the edge • Software vulnerabilities • New generation of threats • Stealthy malware • Targeted attacks • New technologies, devices and their threats • The human factor

  4. Research framework • Introducing intelligence to the best-effort model • Multicast (Ph.D. research): network support for multicast applications • XML routing for content-aware networking • Network Security • New network design that can provide security to end-systems • Enabling network forensics: efficient storage and efficient traceback • Providing trust through distributed logging • Investigation of new threats

  5. Projects • Current projects • Investigation of stealthy worm attacks (Alcatel-Lucent and OCE) -PI • Traffic analysis for Internet security (NSERC) - PI • Recent projects • Quantitative evaluation of network security (Solana Networks and CITO) - PI • Application-aware networking (Alcatel and CITO) - PI • Critical infrastructure protection by integrating GIS and NMS (PSEPC) • Public alert systems over the Internet (Industry Canada) • Scheduling in Resilient Packet Ring networks (NSERC)

  6. Network DoS • Work with Paul van Oorcshot and Anil Somayaji • DDoS (Distributed DoS) • NDoS: a subset of DDoS: • We address NDoS inside the network • End systems can not solve this problem • A new diversity-based traffic management

  7. Worm attack

  8. Network Security Evaluation • Work with Fadi El-Hassan, Nabil Seddigh, and Biswajit Nandy • The Hierarchical Quantitative Metrics (HQM) Model • IDS – Snort • Prototype Evaluator • Project is funded by CITO & Solana Networks

  9. The Hierarchical Quantitative Metrics (HQM) Model IAM Security Technical Incident Statistics Security Tests IDS Vulnerability Scanner W2 W1 Wn Analysis M1 M2 Mn

  10. Investigation of Stealthy Worm Attacks • Work with Craig Smith, Stanley Chow and Bassem Abdleaziz • more members to join • New generation of malware: • Example: Storm • Hiding worm activity during target discovery, propagation, activation, .. • Current defenses can not help! • Funding from Alcatel-Lucent and OCE

  11. New areas • Malware spreading through wireless LANS • Malware for mobile devices • Network security in new environments (Mesh networks, aircrafts, …)

More Related