network security at SC2003

[Doug Pearson <dodpears () INDIANA EDU>]

Here are references to interesting network security monitoring and statistics at the Supercomputing 2003 conference 
currently running in Phoenix. SC2003 has approximately 7000 attendees and a large exhibit floor. I don't have a count 
of exhibitors, but you can get a sense by looking at the floor map:
http://netsec.ca.sandia.gov/floorplan.pdf

The network security information is collected by a combination of BRO (Vern Paxon), MONS (Sandia), and Kismet.

Summary of security incidents captured by the SCinet monitoring:
http://www.sc03.org/security/summary.html.

And, very interesting is The Spinning Cube of Potential Doom.
http://www.sc03.org/security/TheSpinningCube.html
The cube represents SC2003 IP address space on the X axis, world IP space on the Y axis, and port numbers on the Z 
axis. Scanning activity appears as lines creeping through the cube. Unfortunately you can't see the live Spinning Cube 
via the web, but the web page provides screen shots.

Doug P.


----
Doug Pearson; Indiana University; dodpears () indiana edu
Phone: 812-855-3846; ViDeNet: 0018128553846
PGP: http://mypage.iu.edu/~dodpears/dodpears_pubkey.asc

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.