Light-weight, Low-cost Security Monitors for High-performance Networks
Light-weight, Low-cost Security Monitors for High-performance Networks
Firewall-centric architectures inappropriate for (some)
high-performance networks (e.g. ATM).
- lack of filtering switches
- Layer 3 and higher fragmentation
- performance degradation
Develop hybrid approach with
- passive auditing monitor, linked to
- active response module to enforce security policy
Extend and adapt OC3mon and OC12mon Coral monitors to
perform security monitoring and enforcement.