DePaul University

DePaul University A Network Case Study John Kristoff <jtk@depaul.edu> http://condor.depaul.edu/~jkristof/ John Kristoff

Organizational Structure John Kristoff

Another View John Kristoff

Network OverviewSpring 1999 John Kristoff

Network OverviewSpring 2000 John Kristoff

Gigabit WAN John Kristoff

Lincoln Park Infrastructure • Expansion and Renovation • Network Connectivity Costs • Network Connectivity Options • Approximately 30 buildings to connect! John Kristoff

Network SecuritySpring 1999 • DNS server compromised - GAME OVER! • Lack of awareness/expertise • No computer security person/team • Security incidents were never reported by an I.S. staff member John Kristoff

Network SecurityFirst Steps • Compromised systems rebuilt • Routers/Switches secured • Router filters applied • Network equipment logging enabled • Scare tactics used John Kristoff

Computer SecurityToday • Incident response team formed • Directive from VP • Use of encryption increasing • Staff participating in training and industry events • Regular network security audits • Awareness is built! John Kristoff

Computer SecurityTomorrow • Sophisticated intrusion detection system • Firewalls in front of key resources • Membership into FIRST.org • More encryption • Revised and updated policies • More secure systems and network! John Kristoff

Bandwidth Management • Internet bandwidth is our last mile • Difficult to provide fairness • ResNet • many shared LANs • many users suffer! • Throw bandwidth at the problem? • No silver bullet today John Kristoff

Some of My Favorite Network Tools • MRTG • Netflow data • syslog • NTP • nmap • packet capture (Sniffer, tcpdump, etc.) • documentation! John Kristoff

DePaul University