Salsa-NetAuth Working Group

Minutes | Mailing List | Documents | Federated Wireless NetAuth | Links || Wiki

Various methods and techniques currently exist to provide identification, registration, and authorized access to campus networks. The problems posed by the scope and scale of recent security incidents such as MSBlast and Polybot have shown the value of these data. Security management requires a rich set of data across disparate data sources to provide a cohesive network information base for device location and incident remediation. These same data and techniques may also be used to extend network access to visiting scientists among federated organizations.

The Salsa-NetAuth Working Group will consider the data requirements, implementation, integration, and automation technologies associated with understanding and extending network security management related to:

1. Authorized network access (keyed by person and/or system)
2. Style and behavior of transit traffic (declarative and passive)
3. Forensic support for investigation of abuse

Initial activities will include:

• Investigation of requirements and implementations of network database and registration services in support of network security management
• Investigation of extensions to these services including: proactive detection of unauthorized or malicious network activity; containment and prevention of such activity; identification and remediation of the sources of such activity
• Analysis and proposal toward a pilot and eventual implementation to support network access to visiting scientists among federated institutions
• Analysis of security applications that may result from extending these implementations

NOTE WELL: All Internet2 Activities are governed by the Internet2 Intellectual Property Framework.

To subscribe to the NetAuth list, send email to sympa at internet2 dot edu, with the subject line:

subscribe <list name> FirstName LastName

subscribe salsa-netauth Jane Doe

To unsubscribe, send email to sympa at internet2 dot edu, with the subject line:

unsubscribe salsa-netauth

Archive: <salsa-netauth@internet2.edu>

These documents are works in progress. For more information on the status of these documents, see the Internet2 Document Guidelines. For reference see also the Internet2 Document Library.

• NetAuth Wiki
• Components Framework for Policy-based Admission Control (PDF) | (DOC)
  Diagram (PDF)
  Kevin Amorin, Harvard University; Eric Gauthier, Boston University, September 2005
• Salsa-NetAuth Working Group Roadmap (PDF)
  Christopher Misra, University of Massachusetts Amherst, April 2005

Final Documents

• UMassSafetyNet:Automated network policy enforcement system (PDF)
  Christopher Misra, U. Mass, 30-March-2006
• Architecture for Automating Network Policy (PDF)
  Kevin Amorin, Harvard University; Eric Gauthier, Boston University - Editors, October 2005
• Strategies for Automating Network Policy Enforcement
  Eric Gauthier, Phil Rodrigues, 20 April 2005

• NetAuth Wiki
• Salsa-NetAuth presentation: Fall Member Meeting (PPT)
  Philadelphia, PA, September 2005
• Salsa-NetAuth presentation: Joint Techs Workshop (PDF)
  Vancouver, BC, July 2005
• Salsa
• 2004 Summer Salsa Security Workshop
  21-22 July 2004, Columbus, OH
• Salsa Security Briefing Conference Call Presentation
  23 September 2004

• PacketFence

• Coming Soon...

Internet2 Security | Salsa