1. James Robnett EVLA M&C Software PDR May 14-15 2002 1 EVLA Monitor & Control Software PDR Monitor & Control Network Security

2. James Robnett EVLA M&C Software PDR May 14-15 2002 2 Requirements Accessibility –Operators –Engineers –Scientists Monitor vs. Control –Read vs. write Security –Acceptable risk

3. James Robnett EVLA M&C Software PDR May 14-15 2002 3 Access From M&C systems to antennas From VLA to antennas From AOC to antennas From NRAO to antennas From non-NRAO to antennas

4. James Robnett EVLA M&C Software PDR May 14-15 2002 4 Vulnerabilities M&C systems M&C/Antenna Network MIB Other ?

5. James Robnett EVLA M&C Software PDR May 14-15 2002 5 M&C systems (Linux, Solaris, Windows) Virus Root access Denial of Service M&C software itself

6. James Robnett EVLA M&C Software PDR May 14-15 2002 6 M&C and antenna network Network Devices –CISCO IOS NTP vulnerability Announced May 8 th –TCP/IP stack Network flooding

7. James Robnett EVLA M&C Software PDR May 14-15 2002 7 MIB vulnerabilities TCP/IP stack Telnet (authentication) HTTP server NTP Denial of service –Port flooding Human Error

8. James Robnett EVLA M&C Software PDR May 14-15 2002 8 Direct Access Firewall –Limit access based on Source IP Sender Digital Certificate –MIB awareness –Throttle flooding –Encryption precludes content filtering Can’t guarantee packet integrity

9. James Robnett EVLA M&C Software PDR May 14-15 2002 9 Indirect Access –Proxy service Request proxy Web Proxy –Virtual antenna Same client software –Remote display X11 or Citrix –slow