Internet2 Network Security SIG

[Andrew Gallo <>]

GW campus network joined manners earlier this summer. The process was 
straight forward and was more of a sanity check on things we've had in 
place for years. The only question posed to us is why we hadn't 
published our routing policy in an IRR using RPSL. The small regional we 
run, CAAREN, had a bit more work to do, but also was added as a MANRS 
participant this summer. As a transit provider, the anti-spoofing action 
took a bit of work to 'tighten-up,' but we're now running in strict mode 
RPF (with exception filters) for most of our customers, though one 
requires loose mode. A couple of thoughts on "embedded security" : 
monitoring, measuring and reporting would be the key things I would 
focus on first. Action (specifically filtering) would be a tougher. 
Filtering on demand (maybe via flowspec) has been talked about.


On 8/14/2018 11:23 AM, Brock, Anthony W wrote:
> Colleagues,
> As most of your are aware, Internet2 has been working with several of their 
> partners (GÉANT, Jisc, etc) to identify how to best integrate security into 
> their present and future efforts. One of the deliverables from this group 
> (the REN Routing Security group) is the implementation of MANRS 
> https://www.manrs.org/ in their respective environments. Internet2 plans to 
> have MANRS implemented by the end of 2018 and several others (Geant, ESnet, 
> KANREN, etc.) have either already implemented or are in the process of 
> implementing it.
> Has your organization implemented MANRS or are you planning to? If not, what 
> are your obstacles to implementation (money, time, priorities, etc)? If yes, 
> what helped to move this forward within your organization?
> Also, Internet2 is including "embedded security" as part of the plan for the next 
> generation of their network. It turns out that "embedded security" has not yet been 
> defined within the context of their environment! So...
> How would your define "embedded security" for Internet2? What would it look 
> like? Would it be increased security intelligence, analysis, operational activities, 
> etc? How could this be defined to help you and your organization in both your 
> day-to-day activities as well as in your long-term security interests? Finally, would 
> this be a topic of interest for calls with the Security WG, within the overall NTAC, or 
> maybe even at the coming TechX conference?
> Tony

--
________________________________
Andrew Gallo
The George Washington University

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature