Internet2 Network Security SIG

[Adair Thaxton <>]

A bit of a sad update - We're saying goodbye to some of our teammates.  Nathan Miller has joined ESNet, Grover Browning is returning to Indiana University to lead an automation team, and Ryan Nobrega is going to the private sector.  We'll miss them all and hope they keep in touch!  Brian Pullin from GlobalNOC is joining us to replace Nathan, and he's already hit the ground running.

One of Nathan's last projects was enabling IPv6 RTBH in the Internet2 network.   While IPv4 RTBH has been available for several years, support for IPv6 was missing.   RTBH is one tool for mitigating DDoS attacks and support for both IPv4 and IPv6 is part of our strategy.   One more step is scheduled before calling this done, and that is implementing reporting of RTBH IPv4 and IPv6 RTBH announcements.   When this is compete, we will blog and announce the details to NTAC.

We're making progress on blocking RFC1918 addresses at ingress from our connectors.  Brian is finishing up some pre-change legwork and will begin testing and completing the changes mid-May.

The TechEx Call For Participation is open through May 17!  We currently have ONE proposal submitted, so please, I beg of you, forward the CFP to your associated groups - state and local education security listservs, campus security groups, and professors doing cool stuff.  We absolutely rely on you all to make TechEx a fun and interesting event!

The DDoS Working Group has had some talks with Radware about a potential alternative to ZenEdge.  If you're interested, the recording of our initial meeting is here (https://internet2.box.com/s/yjmcwkb7b0jppbb7cl7ja55ta54l6cec) and the recording from yesterday's technical followup is here (https://internet2.box.com/s/vdwub53hij600pb993v8qf992nrzectk).  There will be an additional meeting at 3pm tomorrow (Zoom: https://internet2.zoom.us/j/922706065) to discuss the business aspects of Radware and gauge community interest in the switch.

Thanks to Jesse for doing great work finding a time for this Working Group to have a chat!  As he said yesterday, the best time will be May 9 at 3pm.  The invite is attached.  If you prefer to make your own calendar invite, the Zoom link is here: https://internet2.zoom.us/j/748462028

This month's FYI link is about OAUTH2 hacks: https://habr.com/en/post/449182/

Have a great month!

Adair

BEGIN:VCALENDAR
VERSION:2.0
BEGIN:VEVENT
CREATED:20190501T150806Z
DESCRIPTION:Adair Thaxton is inviting you to a scheduled Zoom meeting.\n\nTopic: Security Working Group Meeting\nTime: May 9\, 2019 3:00 PM Eastern Time (US and Canada)\n\nJoin Zoom Meeting\nhttps://internet2.zoom.us/j/748462028\n\nOne tap mobile\n+16465588656\,\,748462028# US (New York)\n+16699006833\,\,748462028# US (San Jose)\n\nDial by your location\n        +1 646 558 8656 US (New York)\n        +1 669 900 6833 US (San Jose)\nMeeting ID: 748 462 028\nFind your local number: https://zoom.us/u/abc2s4cxZy\n\nJoin by SIP\\n\nJoin by H.323\n162.255.37.11 (US West)\n162.255.36.11 (US East)\n221.122.88.195 (China)\n115.114.131.7 (India)\n213.19.144.110 (EMEA)\n202.177.207.158 (Australia)\n209.9.211.110 (Hong Kong)\n64.211.144.160 (Brazil)\n69.174.57.160 (Canada)\nMeeting ID: 748 462 028\n\nJoin by Skype for Business\nhttps://internet2.zoom.us/skype/748462028\n
DTEND;TZID=America/New_York:20190509T160000
DTSTART;TZID=America/New_York:20190509T150000
LOCATION:https://internet2.zoom.us/j/748462028
SUMMARY;LANGUAGE=us-EN:Security Working Group Meeting
UID:{27d2a2be-8b4f-475a-858e-1b68cf356bd8}
BEGIN:VALARM
TRIGGER:-PT10M
ACTION:DISPLAY
DESCRIPTION:Reminder
END:VALARM
END:VEVENT
END:VCALENDAR