NANOG Security Curriculum

NANOG actively works to produce sessions and seminars to help foster security on the Internet. All sessions are taped and converted to streaming media for all to use for their personal education. Slides are available for each session as well. Over time, this effort has generated a valuable online tutorial for engineers and others seeking to learn more about running a more secure network.

ISP Security Tutorials/Presentations

ISP Security 101 Primer. Level: Introductory/Intermediate

http://www.nanog.org/mtg-0602/greene.html

Challenges in Network Security Protocols. Level: Introductory/Intermediate

http://www.nanog.org/mtg-0505/perlman.security.html

ISP Security 101 Primer. Level: Introductory/Intermediate

http://www.nanog.org/mtg-0602/greene.html

XSP Security Vulnerabilities Panel

http://www.nanog.org/mtg-0505/hannigan.html

Panel: BGP Security Requirements--An Overview of Current Work in the IETF

http://www.nanog.org/mtg-0501/white.html

Team Cymru Bogon Route Servers

http://www.nanog.org/mtg-0501/deitrich.html

A Day in the Security Life of a Service Provider--Qwest

http://www.nanog.org/mtg-0501/donsmith.html

Using IPsec to Encrypt Your Wireless Traffic at NANOG. Level: Introductory, Hands-on

http://www.nanog.org/mtg-0405/wessels.html

Customer-Triggered Real-Time Blackholes. Level: Introductory

http://www.nanog.org/mtg-0402/morrow.html

Implementing a Secure Network Infrastructure (Parts I-III)

http://www.nanog.org/mtg-0310/kaeo.html

ISP Security - Real World Techniques I - Remote Triggered Black Hole Filtering and Backscatter Traceback

http://www.nanog.org/mtg-0110/greene.html

ISP Security - Real World Techniques II - Secure the CPE Edge

http://www.nanog.org/mtg-0210/ispsecure.html

ISP Security: Deploying and Using Sinkholes

http://www.nanog.org/mtg-0306/sink.html

Tutorial: Deploying IP Anycast

http://www.nanog.org/mtg-0310/miller.html

ISP Security Presentations (General Session)

Implications of Securing Backbone Router Infrastructure

http://www.nanog.org/mtg-0405/mcdowell.html

IPv6 IPv4 Threat Comparison

http://www.nanog.org/mtg-0405/miller.html

Preparing RIR Allocation Data for Network Security Analysis Tasks

http://www.nanog.org/mtg-0405/trammell.html

End-to-end, Spam, and DoS: Threats to the Model That Made the Internet Great

http://www.nanog.org/mtg-0402/karn.html

How to Kill Worms and Viruses with Policy Pontifications

http://www.nanog.org/mtg-0402/policy.html

Listen and Whisper: Security Mechanisms for BGP

http://www.nanog.org/mtg-0402/subramanian.html

Analysis of the DDoS Attack Against SCO

http://www.nanog.org/mtg-0402/moore.html

Watching Your Router Configurations and Detecting Those Exciting Little Changes

http://www.nanog.org/mtg-0310/rancid.html

Building a Web of Trust

http://www.nanog.org/mtg-0310/abley.html

The Relationship Between Network Security and Spam

http://www.nanog.org/mtg-0310/spam.html

Simple Router Security, What Every ISP Router Engineer Should Know and Practice

http://www.nanog.org/mtg-0310/routersec.html

Flawed Routers Flood University of Wisconsin Internet Time Server

http://www.nanog.org/mtg-0310/plonka.html

Trends in Denial of Service Attack Technology

http://www.nanog.org/mtg-0110/cert.html

Recent Internet Worms: Who Are the Victims, and How Good Are We at Getting the Word Out?

http://www.nanog.org/mtg-0110/moore.html

DoS Attacks in the Real World

http://www.nanog.org/mtg-0110/irc.html

Diversion and Sieving Techniques to Defeat DDoS

http://www.nanog.org/mtg-0110/afek.html

DNS Damage - Measurements at a Root Server

http://www.nanog.org/mtg-0202/evi.html

Protecting the BGP Routes to Top Level DNS Servers

http://www.nanog.org/mtg-0206/bush.html

BGP Security Update

http://www.nanog.org/mtg-0206/barry.html

Industry/Government Infrastructure Vulnerability Assessment: Background and Recommendations

http://www.nanog.org/mtg-0206/avi.html

A National Strategy to Secure Cyberspace

http://www.nanog.org/mtg-0210/sachs.html

How to 0wn the Internet in Your Spare Time

http://www.nanog.org/mtg-0210/vern.html

ISP Security BOF I

http://www.nanog.org/mtg-0210/securebof.html

The Spread of the Sapphire/Slammer Worm

http://www.nanog.org/mtg-0302/weaver.html

ISP Security BOF II

http://www.nanog.org/mtg-0302/securebof.html

The BGP TTL Security Hack

http://www.nanog.org/mtg-0302/hack.html

Security Considerations for Network Architecture

http://www.nanog.org/mtg-0302/avi.html

Lack of Priority Queuing on Route Processors Considered Harmful

http://www.nanog.org/mtg-0302/gill.html

Interception Technology: The Good, The Bad, and The Ugly!

http://www.nanog.org/mtg-0306/schiller.html

The NIAC Vulnerability Disclosure Framework and What It Might Mean to the ISP Community

http://www.nanog.org/mtg-0306/duncan.html

Inter-Provider Coordination for Real-Time Tracebacks

http://www.nanog.org/mtg-0306/moriarity.html

ISP Security BOF III

http://www.nanog.org/mtg-0306/securitybof.html

S-BGP/soBGP Panel: What Do We Really Need and How Do We Architect a Compromise to Get It?

http://www.nanog.org/mtg-0306/sbgp.html

BGP Vulnerability Testing: Separating Fact from FUD

http://www.nanog.org/mtg-0306/franz.html

BGP Attack Trees - Real World Examples

http://www.nanog.org/mtg-0306/hares.html

NRIC Best Practices for ISP Security

http://www.nanog.org/mtg-0306/callon.html