1. Liquid Telecom Network Security

2. Network Security - Availability Physical Infrastructure – PoP Site Security/Traffic Protection Logical – Device Hardening/Traffic Protection Processes – Fraud Management

3. Physical Security – PoP site Surveillance CCTV Fire Alarms Motion sensors and door alarms Lock and Key Alarm Response from security companies

4. Physical Access (Access Authorisation) Call site access agent Your information and purpose Duration of access Access codes

5. Other - Power UPS Generators

6. Logical – Device Hardening Securing Device Unauthorised Access (login) and attacks Terminal passwords Alpha-numeric with minimum length AAA remote authentication Password expiration

7. Logical – Device Hardening (cont.) Disable unnecessary services & features (e.g.http, telnet, ip redirects, pad, etc) Use secure protocols (SNMP v3, ssh) Control plane policing Traffic policing/shaping

8. Logical – Device Hardening (cont.) Shut unused interfaces Software patches Logging Network Monitoring & Management Systems behind firewalls

9. Traffic Protection – Physical & Logical Physical route diversity Logical protection (MPLS)

10. NMMS High Availability Behind firewall

11. DDoS Monitoring devices Fingerprints continuously updating Sends Alerts to interested parties Mitigation

12. Processes Work Order process flow

13. Experiences Login attempts DDoS Solution – black hole

14. Discussion/Questions