vZW20 - Day 2 - Using Zeek in ESnet6 management network security monitoring - Scott Campbell
Channel: Zeek
Date: 2020-11-02

Summary: ESnet is building a greenfield implementation for its next generation network. This presentation describes how we are using Zeek as an integral part of our monitoring and security strategy, focusing on architecting traffic patterns to maximize intruder visibility as well as providing critical feedback on device misconfiguration.

Abstract: ESnet is building a greenfield implementation for its next generation network. In it the Management plane represents the command and control infrastructure of our network, so security has to be a significant component of its design and operation. This presentation describes how we are using Zeek as part of our monitoring and security strategy, focusing on architecting traffic patterns to maximize intruder visibility as well as providing critical feedback on device misconfiguration.

More about Zeek and connecting with the community can be found at: https://zeek.org/ 

Join the discussion on Slack at: http://bit.ly/ZeekOrgSlackInvite