Towards HardLANs: Building intrusion detection to 1 Gbps...

Channel:

Google TechTalks

Subscribers:

348,000

Published on October 9, 2007 2:21:06 AM ● Video Link: https://www.youtube.com/watch?v=gNDGxzcbO2w

Duration: 46:30

2,324 views

6

Google Tech Talks
February 21,2007


ABSTRACT:

With the advent of worms, passive malcode, and sophisticated attackers, the "Big Firewall" model of security has failed. To build robust commercial networks in the future, security will need to move into the LAN infrastructure.

The LAN vantage point requires a nearly two-order-of-magnitude cost/performance improvement over conventional network intrusion detection and response. In this talk, I introduce the rational for LAN-centric defences and the difficulties in implementing for these targets. I will then discuss our work on Shunting, a technique which enables the Bro intrusion detection to operate at Gigabit line rate with the addition of a...