Join/Renew Benefits Sage Programs SysAdmin Resources Jobs Board SAGE Home
The USENIX Special Interest Group for Sysadmins

Improving Network Security Through The Use of Host Rings
Geoff Halprin

Topic: Security
Audience: Intermediate users

Description:
Much work has been done in recent years on Internet Firewall technology. This technology creates a "choke point" through which all traffic must pass between (typically) the Internet and the internal network. This technology is equally useful wherever a clear separation can be made between any two networks where one does not trust the other.
This is extremely valuable technology in the fight to control the security of a network. The basic assumption that this technology makes, however, is that everybody on the outside is bad and everybody on the inside is good.
In order to bring better control and security to an internal network, another security model is required. This model needs to recognise that physical and logical security attributes, and the separation of functions, as is commonplace with good client-server network design, can contribute to identifying where and what type of trust should exist between hosts.
This paper describes the host rings model, how it can be implemented, the advantages of this model, and experiences with implementing it at various sites.

TOPIC_CHOICE: Network and Computer Security

Prerequisites:
Familiarity with TCP/IP Networks and UNIX

History:
SAGE-AU'96 (Brisbane)

Last change: Sep 16, 2006 04:37:21 PM

The Speaker: Geoff Halprin

Contact Organization: The SysAdmin Group
Location: Melbourne, Australia
Phone: +61-3-9686-3233
Email: Geoff.Halprin@sysadmin.com.au
Website: http://www.sysadmin.com.au
Will travel: Anywhere
Payment required: Fees + Travel
Compensation required: 1500 per day
Other payment info: Fees and expenses for tutorials, travel only for conference papers. Need several months warning for overseas travel.

Bio:
Geoff Halprin is the Principal Consultant at The SysAdmin Group. He has been a system administrator for the past 15 years, and a consulting system administrator for over 10.

Geoff specialises in data security and systems management disciplines, and in the evaluation and improvement of systems management practices. He has consulted to a wide variety of organisations, including government, large corporations, and several major ISPs.

Geoff is also the Vice-President of the System Administrator's Guild of Australia (SAGE-AU).

Last change: Sep 8, 2006 02:55:12 AM

Other Talks by this speaker
Managing a Production Environment
The Workflow of System Administration
Systems Management - The Bigger Picture
Auditing - The Unexpected Ally
Management-101