1. TAMU and NSWC July 2000

2. Objectives Keep network activity anonymous and unobservable Provide QoS-guaranteed communication services Be upward and downward compatible with existing operating systems, applications, and network technologies Be scalable and evolvable

3. Approaches Traffic camouflaging: traffic rerouting and padding based on real-time traffic modeling theory (RTMT). Real-time communication: providing end-to-end delay guaranteed services based RTMT and efficient admission control Implemented both middle-ware version and independent station version Future work: traffic monitoring and intrusion detection

4. NetCamo/M Testbed

5. NetCamo/N Testbed

6. NetCamo/M System A middle-ware solution Advantages –No additional equipment –Upward and downward compatible Status –Working on MS NT workstations –Providing both real-time and camouflaging services –Demonstrated to DARPA in May 2000

7. NetCamo System/M Architecture TCPCORBA Internal Method invocationSNMP/Telnet/COPS NetCamo Network Controller DeviceIOctl Data Transmission Host Agent Router Agent NetCamo Traffic Manager Router API API Host Manager Client Applications Traffic Controller H323H323 NetCamo Host Controller API API Host Manager Client Applications Traffic Controller H323H323 NetCamo Host Controller Host Network

8. NetCamo/M Results Station 1  Station 2: CBR 250 pps (200 Direct + 50 Re-route via Station 4) Station 1  Station 4: VBR 40pps (Direct) Station 4  Station 1: VBR 20pps (Direct) Station 4  Station 2: VBR 20pps (Direct)

9. NetCamo/N System Using independent NetCamo Stations No disturbance to application hosts and upward and downward compatible Status: July 2000, beta version of NetCamo station realized on Lynux-based PCs, providing both IPSec and camouflaging services

11. NetCamo/N Results Cover mode: 100pps