Case Study Selections

Our case study network has security responsibilities assigned to specific IT team members. Each IT team participates in local security organization meetings and mailers and uses other resources identified in this chapter, such as NANOG. In terms of tools used, NetFlow is the centerpiece, with continual baselining of traffic so that any anomalous traffic pattern alerts the security team to potential issues. Cisco Guard has become a key piece of the infrastructure security program, and Cisco Secure Agent is installed on all PCs. Extensive use is made of black-hole filtering, backscatter traceback, and sinkholes. Specific security contacts are maintained for each provider and partner network connected to so that attacks can be effectively traced trough those networks should they be the source.