1. INDIANAUNIVERSITYINDIANAUNIVERSITY Abilene Security Exercise James Williams Director – International Networking and Operational Assurance Indiana University williams@indiana.edu

2. INDIANAUNIVERSITYINDIANAUNIVERSITY 1.Held in Indianapolis at Global NOC site. 2.Participants from Internet2, Global NOC, SysEng, REN- ISAC 3.Objective to investigate processes and interactions, NOT to solve a network problem Background

3. INDIANAUNIVERSITYINDIANAUNIVERSITY Scenarios 1.Two scenarios, both introduced by observation of a network problem. 2.Attempt to act on scenarios as realistically as possible (IU engineering assistance critical). 3.Focus on process and interaction, NOT on technical wizardry.

4. INDIANAUNIVERSITYINDIANAUNIVERSITY Some Details One DDoS attack scenario One router/system compromise scenario Incorporated off-site people (Internet2 executives; nosey journalists)

5. INDIANAUNIVERSITYINDIANAUNIVERSITY Some Lessons Learned 1.Critical nature of the Global NOC Service Desk in linking Engineering and Security resources 2.Lack of clarity about how to deal with the press. 3.Lack of clarity about who to contact about a widespread outage (nasty DDoS attack) 4.Lack of a clear plan for communication and problem resolution IF NETWORK DOWN.

6. INDIANAUNIVERSITYINDIANAUNIVERSITY Future Activities 1.Internet2 and the Global NOC will have other security exercises. 2.Internet2 is interested in (is currently) planning similar exercises with other networks.

7. INDIANAUNIVERSITYINDIANAUNIVERSITY Opportunities for APAN 1.In my experience, conducting a similar exercise at the APAN NOC would be very valuable. The Global NOC learned many things from this experience. 2.Internet2 is interested in partnering with APAN, the APAN NOC and the Global NOC to conduct an international Asia-US security exercise.

8. INDIANAUNIVERSITYINDIANAUNIVERSITY Conclusion This was a very valuable exercise. I cannot stress that enough. Heather and I are anxious to assist in whatever way we can, if APAN feels there would be value in extending this effort to Asia.

9. INDIANAUNIVERSITYINDIANAUNIVERSITY Questions… williams@indiana.edu heather@internet2.edu