[gull-annonces] 18.8.03: ISG.EE-Talk: network security and measurement

[Marc SCHAEFER]

ISG.EE would like to invite you to 3 presentations on current
topics in network security and measurement
by David Moore, Colleen Shannon, and Tobias Oetiker.


The talks will be held on
Monday 18th August 2003, 10am - 12am
Auditorium VAW B1 at ETH Zurich, Gloriastr. 35/37
(No registration needed)

Abstracts:

* Network Telescopes: Assessing Global Internet Security Threats.
Network telescopes provide the unique ability to see large-scale
globally-dispersed network security events, such as
denial-of-service attacks and the spread of Internet worms. A
network telescope is a portion of routed IP address space with
little or no legitimate traffic. By monitoring unexpected traffic
arriving at a telescope, we can determine remote victims of DoS
or hosts infected by a worm. More than 100 distributed
denial-of-service attacks are occurring on average every minute
of every day. Highly infectious Internet worms have become
prevalent: in August 2001, CodeRed infected 360,000 machines in
10 hours. In January 2003, Sapphire/SQL Slammer infected over
75,000 machines in ten minutes. This talk covers trends in DoS
attacks and victims over the past 2 years, as well as the spread
dynamics of the Code-Red, CodeRedII and SQL Slammer/Sapphire
worms.

* CAIDA, the Cooperative Association for Internet Data Analysis.
CAIDA, provides tools and analyses promoting the engineering and
maintenance of a robust, scalable global Internet infrastructure.
This talk will present the activities of CAIDA and present some
of the tools developed there that might be useful for others as
well.

* Pinging with Style, about SmokePing and RRDtool
When I want to see if a machine is up and its network connection
ok, I send it a ping. If I want to keep a close watch on the
machine and its link, I keep sending it pings. If I grow tired,
waching the roundtrip times and the increassing sequence nubmers on
screen, I might want to employ a program to organize the ping
sending, as well as keeping the results handy for later. This is
where SmokePing comes in. It lets you keep track of many network
links and machines, tracking the results graphically and sending
alerts when certain conditions are met.
For more informaton about ISG.EE-events in 2003, please have a look
on our website:
http://isg.ee.ethz.ch/events/j2003/index.en.html