NetOS Meeting Randomlette

1
(NetOS Meeting Randomlette)
ICSI Bro a.k.a. What I Did Last Summer

• Christian Kreibich

2
International Computer Science Institute

• In Berkeley (yay!)
• Affiliated with University
• Institutions pay them lots of money so they can
  send people there
• Finland, Germany, Spain, Switzerland, ...
• Networks group http//www.icir.org, weekly group
  meetings with free food (yay!)
• Also AI, Algorithms, Speech, Berkeley Center for
  Information Society
• Bit over 100 people

3
International Computer Science Institute
4
International Computer Science Institute
5
Bro IDS

• Network-based IDS, Paxson 99
• Separation of mechanism from policy
• Good (lots), bad grown, complex
• Lots of momentum thanks to DOE money
• Current work distributed communication, global
  state, usability
• Deployments ICSI, LBL, TUM
• Useful for traffic analysis one-line connection
  summaries
• http//www.bro-ids.org