BCNET Security Policies Jens Haeusser Information Security Officer, UBC and Chair, Security Working Group, BCNET Internet2 Joint Techs Vancouver, BC July 19th, 2005

July 19, 2005 Internet2 Joint Techs, Vancouver 2005 Slide 2 The Challenge Overall policies similar to other RANs  Incidents passed to member institutions Internal security  Often lower priority Increasing pressure from members  Clean Pipe Researchers want access to traffic

July 19, 2005 Internet2 Joint Techs, Vancouver 2005 Slide 3 About BCNET BCNET is a non-profit society supporting and promoting advanced networks in the province and serves BC’s universities and research and development institutions BCNET is supported by the provincial and federal governments as well as by its regional university members The mission statements of the universities drives the purposes of BCNET  Research  Teaching  Community Service

July 19, 2005 Internet2 Joint Techs, Vancouver 2005 Slide 4 BCNET - Collaboration BCNET meets the conditions of a distributed multi-service network  Advanced network, highly customizable big bandwidth  Local community peering, development, and access  Reliable and redundant links to the Internet Collaboration and community involvement is key to the success of the BCNET 2010 project Reflected in the operations and other BCNET projects

July 19, 2005 Internet2 Joint Techs, Vancouver 2005 Slide 5 Operational Collaboration The Network Engineering group is comprised of the peer IT Networking groups of each of the primary Members of BCNET: BCIT, SFU, UBC, UVIC, and UNBC Each Transit Exchange has the local university IT group as its primary support To be expanded as the BCNET ORAN expands with 3 more Transit Exchanges A central NOC is utilized for 24x7 support and to co-ordinate maintenance, scheduling, and trouble ticketing

July 19, 2005 Internet2 Joint Techs, Vancouver 2005 Slide 6 BCNET Advisory Committees BCNET utilizes Advisory Committees to increase involvement in communities of interest Committee members are invited from leading technology areas, not limited to BCNET membership Applications Advisory Committee  Provides advice regarding BCNET’s role in the facilitation of advanced applications that would take advantage of the ORAN.  The committee reviews potential applications that make use of the network: determines relevance of applications to the BCNET institutional members recommends priorities for investigation suggests methods (pilot projects, etc.) for facilitation of such applications

July 19, 2005 Internet2 Joint Techs, Vancouver 2005 Slide 7 BCNET Advisory Committees Network Planning Advisory Committee  A forum where practicing University network engineers can interact with outside experts from industry, Internet2, and CANARIE  Provides advice regarding next generation network technologies and their potential implementation within BCNET Network Research Advisory Committee  A forum where network researchers from member institutions can interact with researchers from the private sector, other institutions across Canada and internationally  Provides advice relating to the development and operation of facilities for specific use by network researchers including the suitability of the overall network design for supporting network research activities and next generation technologies which may be beneficial  Facilitates new areas of network research that can benefit from testing and deployment across the BCNET ORAN

July 19, 2005 Internet2 Joint Techs, Vancouver 2005 Slide 8 BCNET Working Groups Some of the Working Groups generated by the committees  Identity Management  Disaster Recovery  High Performance Computing  Network Performance Analysis  Security

July 19, 2005 Internet2 Joint Techs, Vancouver 2005 Slide 9 Security Working Group Comprised of security staff from members and interested Faculty Formal Risk Assessment  Corporate Information Security Working Group: Report of the Best Practices and Metrics Teams  Vulnerability Scan Review of policies  Acceptable Use Policy  Guidelines for Appropriate and Responsible Use  Other policies arising from risk assessment

July 19, 2005 Internet2 Joint Techs, Vancouver 2005 Slide 10 Future Plans Assist other Working Groups Share Best Practices Application Development Guidelines Network Monitoring  Operational and for Researchers Investigate Other Appliccations  PKI/Two Factor Authentication  Secure

July 19, 2005 Internet2 Joint Techs, Vancouver 2005 Slide 11 Resources Security Working Group Acceptable Use Policy Guidelines for Appropriate and Responsible Use Corporate Information Security Working Group SD SD3661 Educause Security Policies

July 19, 2005 Internet2 Joint Techs, Vancouver 2005 Slide 12 BCNET OutReach Events Fully develop network usage audit using research office  Strategy underway to work with member Deans of Research. CANARIE project funding being pursued. Work with member PR offices to publicize BCNET initiatives on campus Hold outreach events on member campuses  Participated in Estrategy at UBC – entire afternoon dedicated to BCNET  Event held with research interests at UNBC. One being planned for UBCO in Fall.  Participating in Okanagan Health Tech Symposium  Joint hosting I2 Techs meeting at BCIT Hold annual conference  Have held 5. The 2006 conference likely to be done in consort with WestGrid Hold Cool-Apps contest  Annual graduate student competition promoting new uses of network connectivity

July 19, 2005 Internet2 Joint Techs, Vancouver 2005 Slide 13 BCNET Mission and Vision BCNET envisions a networking environment where BC’s research and educational institutions have “state of the art” access to the world’s best internetworking services. BCNET will provide its membership with the most advanced and cost effective access to networking services and collaborate with other stakeholders in the evolution of the Internet. Thank You !