SC13 Home > SC13 Schedule > SC13 Presentation - Advanced Network Analytics at 100 Gbps

SCHEDULE: NOV 16-22, 2013

When viewing the Technical Program schedule, on the far righthand side is a column labeled "PLANNER." Use this planner to build your own schedule. Once you select an event and want to add it to your personal schedule, just click on the calendar icon of your choice (outlook calendar, ical calendar or google calendar) and that event will be stored there. As you select events in this manner, you will have your own schedule to guide you through the week.

ENTIRE WEEK SATURDAY SUNDAY MONDAY TUESDAY WEDNESDAY THURSDAY FRIDAY

Advanced Network Analytics at 100 Gbps

SESSION: Network Research Exhibition

EVENT TYPE: Network Research Exhibitions

TIME: 1:30PM - 1:45PM

Presenter(s):Jordi Ros-Giralt

ROOM:404

ABSTRACT:
Reservoir Labs proposes to demonstrate R-Scope, a high-performance cyber security appliance enabling a new generation of network analytics for the detection of sophisticated network threats at ingest bandwidth rates of 100+ Gbps. R-Scope extends and enhances the functionality of Bro, a highly configurable and programmable network analysis framework, through a scale-out architecture leveraging the processing capabilities of advanced manycore network processors. Architecturally, R-Scope is comprised of a collection of R-Scope cells, each of which is composed of fundamental network security elements mapped to one or more processing cores. These R-Scope cells are individually capable of providing the full functionality of R-Scope and the underlying Bro network analysis. The R-Scope architecture narrows the traditional separation between load balancer and clustered analyzers seen in typical cyber security installations incorporating network analysis directly into the front-end load balancer. A uniform analytic expression language is used at all stages of processing, migrating intelligence closer to the front end to achieve more accurate and efficient discrimination of incoming packet flows. The hardware used for this demonstration is a 1U, full-length rack-mount R-Scope appliance requiring 490W, 120V or 230V AC power. The R-Scope appliance will connect to the SCinet NRE infrastructure via 10GBASE-SR optical media. Additionally, we will use a 1U rack-mount system for additional control plane activities and situational awareness visualization.