Security

Brad Gorman’s ARIN workshop laid out where routing security stands today, ROAs you can trust, ASPA shipping, BGPSec quietly retired.

I sat in Brad Gorman’s RPKI workshop at CHI-NOG 13 with the kind of attention you give a talk when somebody on stage just admitted the security model has known holes.

Yet another day brings another meeting about another security product recommending SSL Decryption at our network edge.

Gartner has been saying that “next big thing” in network security is the increased use of artificial intelligence (AI) and machine learning (ML) technologies for years now… Mainly because these …

Whenever I start talking about network visibility and aggreagation taps I can’t help but think of The Matrix.

Since I’ve recently had some fun working with the Cisco 5585-X and the IPS blades, I wanted to document some of the information I learned while getting them online.

Everyone has different views on hardening IOS, and while I do not claim to be an expert, these are the practices that I commonly use when bringing up a new device.

Ever since Cisco released IOS 12.0.1T we’ve had the ability to broaden the reach of the extended ACL to allow the influence of time.

For some, BGP is a rather large obtrusive beast of a protocol that scares them half to death.

This is one of the methods I’ve used in the past to secure a Linux host against brute force ssh attacks.