This is an alert ×
Packet Replication, Ethernet Spoofing, and Black Box Diagnostics
Abstract
Several years ago, MSU deployed Intrusion Prevention Systems at the border of the main campus network. Sadly, they didn't work as well as we had hoped. Over the next two years, we developed a number of interesting diagnostic and debugging techniques. Among the stranger methods were using fiber splitters to aid in diagnosis, and abusing the properties of Ethernet to create test systems. I will cover what we did, how it works, and how we scaled it up to apply to today's challenges.
Collection
Subject
Series
2013 Merit Member Conference
Duration
00:41:54 (HH:MM:SS)
Language:
English
Copyright Date
2013-05-15
Persistent/Share URL
https://54098.surd9.group/show.php?pid=njcore:29721
Basic LTI parameter
pid=njcore:29721
PID
njcore:29721