We analyze the pattern and statistics of security incidents reported within a month. Although we have sound proactive measures to secure our backbone elements, we have only been able to react to attacks on our customers' networks after the damage has been done and the incident reported. DosTracker has been a useful tool on our previous Cisco-centric backbone; however, our recent introduction of new routers limits its usefulness.

Proactive solutions and early detection of attacks are our primary interest. We present the ideas we have tried or are working on. We review the latest technologies for detecting security attacks on OC-12 and above backbones.

Presentation slides (HTML)
Powerpoint presentation
RealVideo stream