300 likes | 420 Views
The Cybersecurity Role of the Academic Networks. Dr. Krassimir Simonski Chair Bulgarian Research and Education Network. History of BREN. Pre-History: 1988 : eMail at CCITT (X.400) 1989 : X.25/Decnet Link with Linz University – Austria 1989 : X.25/IP link with Vienna ( 4.8 kbs )
E N D
The Cybersecurity Role of the Academic Networks Dr. Krassimir Simonski Chair Bulgarian Research and Education Network
History of BREN • Pre-History: • 1988: eMail at CCITT (X.400) • 1989: X.25/Decnet Link with Linz University – Austria • 1989: X.25/IP link with Vienna (4.8 kbs) • 1990: EARN membership (European Academic and Research Network) • 1992: UNICOM-B (UNIversity COMmunications – Bulgaria) • Members: Bulgarian Academy of Sciences;Ministry of Education and Sciences; Union of Scientists, …
History • NARN (National Academic and Research Network) - 1995 • 20 universities • 20 research institutes • 50 other (schools, institutes, embassies) • National Education Science and Research Network (НОНИМ) - 1996 • Information Society Technologies Foundation
Membership • RARE and EARN • RIPE NCC (Reseaux IP Europeens)- 1992 • TERENA (TransEuropean Research and Education Network Association)- 1994 • CEEnet (Central and Eastern European Network) – since 1994 • DANTE (Delivery of Advanced Network Technology to Europe) • GEANT • SEEREN
Connectivity • 4.8 kbs – 1989 (Linz, Austria) • 19.2 kbs – 1993 (Vienna, Austria) • 92.8 kbs – 1995 (Vienna, +satellite link) • +2x64 kbs – 1996 (Amsterdam) • 34 mbs – 1999 • 155 mbs – 2005 (Budapest) • 2x155 mbs – 2006 (Budapest) • 1 Gbs – 2008 • 3x10 Gbs - 2008
Connected - Sofia • Sofia University st. Kliment Ohridski • Techincal University • University of Architecture, Civil Engineering and Geodesy (UACEG) • University of National and World Economy • University of Chemical Technology and Metallurgy (UCTM) • University of Forestry • University of Mining and Geology st. Ivan Rilski • Medical University • Medical University - Sofia, Medical College • Higher School of Transport "Todor Kableshkov" • Civil Engineering Higher School "Luben Karavelov" • College of Telecommunications and Posts • New Bulgarian University
Connected – Plovdiv, Varna • Technical University of Sofia, Branch Plovdiv • University of Plovdiv - Paisii Hilendarski • Medical University - Plovdiv • Agricultural University • Academy of Music and Dance • Technical University - Varna • "Nicola Vaptsarov" Naval Academy • University of Economics • Varna Free University "Chernorizets Hrabar"
Connected - other • Rousse University "Angel Kanchev" • University of Veliko Tarnovo • National Military University • Medical University - Pleven • Technical University - Shoumen • Konstantin Preslavski University of Shoumen • Faculty "Artillery, Air Defense and Communications” • Trakia University • Tsenov Academy of Economics
Connected – Research Institutes • Bulgarian Academy of Sciences • Central Laboratory of Parallel Processing • Laboratory of Telematics • Bulgarian Academy of Sciences - Central Administration • Cyrillo - Methodian Research Center • Institute of Biophysics • Institute of Computer and Comunnication Systems • Laboratory of General Ecology • Institute of Mathematics and Informatics • Institute of Physiology and Institute of Botany • Institute of Organic Chemistry • Geological Institute • Geophysical Institute • Solar Terrestrial Influences Laboratory • Laboratory of Computer Virology • Wide Field Plate Database - BAS • Institute of Optical Storage and Processing of Information • Institute of Information Technologies • Central Library of the Bulgarian Academy of Sciences • Institute of Philosophical Research BAS • Central Laboratory of Photoprocesses BAS
BREN Founders • State Agency for ITC • Council of Rectors • Bulgarian Academy of Sciences • NRN including: • International Society Technologies Foundation • Ministry of Education and Sciences • BAS • 25 universities
Activities • Internet access for the academic and educational organizations • Training in Internet technologies • Network administration • Internet Security • Promotion of Internet products and services • Representation in EU structures • Conferences
GEANT • 34 countries through 30 national research and education networks (NRENs) • Backbone at multiple 10Gbps speeds • DANTE project • Part of e-Infrastructure Program of EC
6DEPLOY • Follows 6DISS (Dissemination of IPv6 in Europe): Training • Objectives: • IPv6 Training • Supporting IPv6 Deployment • Partners:Martel CH, Cisco NL, Renater FR, GRNET GR, FCCN P, NIIF HU, Consulintel ES, UCL UK, Soton-ECS UK, UNINETT N, AfriNIC MU, LACNIC UY, BREN BG • Budget: €1,284,776 • Kick-off meeting: April 2-3, 2008 (30 months)
IPv6 Lab • Donation from Cisco • Equipment at the cost of $1,300,000 • Second lab in Europe • Located in the premises of SAITC but access remotely • Access to IPv6 curriculum developed by 6DISS
Why Cybersecurity now? • Government: • Associated links – education as government job • Lack of operational power – expensive labor • Attacks from universities • Attacks against universities • Cybersecurity recruitment • Awareness while still learning • Universities as research cybersecurity labs
Cybersecurity in Universities • The Aim: to protect the users and content – no critical content but time! • Restrictions vs. Liberty • Internal breaches • Experimental Computer Sciences • Personal laptops • Vague Responsibilities
Contribution • Academic CSIRT/CERT • Tracking down violators • Awareness • Training and education • Developing tools – GEANT SA3 activity • Assisting the government
Issues • Internet role • Commercial and even political Interests • Technology flaws at application level – DNS, open ports, application software • Build-in software flaws • Technology race accelerates – difficult to be “a step ahead”
Internet History • 1970 to 1995: Academic Period • Role of Universities and Research Institutions • TCP/IP vs. others • Introducton of Internet • 1995 to 2005: Business Period • WWW • Servers • IP addresses still enough • 2005 + : Social Phenomena • Web 2.0 • Social networks • Internet of things
Internet Latecomers • Bulgaria • 1998 to 2005 – mass penetration of Internet • IP addresses were already a limited resource • 1993 – 2 Class B addresses, 1998 – <6 Class B • Number of PC - > 1 mln. (150,000 every year) • Number of computers > IP addresses • Mobiles – over 100% (potential IP users)
NAT – Solution or Problem • Solution: • Almost unlimited number of computers behind the firewall • Problem: • Anonymity • Tracking users by IP address (Directive #40) • Additional hardware and software • No sharing of resources and information
Conclusion • Universities have important role to play in cybersecurity • Universities could be an experimental polygon but also a critical tool to fight cybercrime • Investment in academic cybersecurity is justified against increased awareness and adequate cyber behavior