Sami Moisio - Physical and Virtual Worlds Are Converging - Mindtrek 2016
The Converging Worlds of Network Management and Security Information Management
-
Upload
hadley-franco -
Category
Documents
-
view
23 -
download
2
description
Transcript of The Converging Worlds of Network Management and Security Information Management
![Page 1: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/1.jpg)
IBM Corporation
February 17, 2006 © 2006 IBM Corporation
Craig Farrell
The Converging Worlds of Network Management and Security Information Management
![Page 2: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/2.jpg)
2
IBM Corporation
© 2006 IBM Corporation
Why is Network Management Changing? Revenue Growth
– Could charge for Availability and Performance
– Now must Charge for Content and Services
Cost Control– Opex pressure is forcing NOC reductions
No reduction in the number of events (Scalability)
Service focused NOC operators are less concerned with Infrastructure and more
concerned with “is the service running”?
![Page 3: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/3.jpg)
3
IBM Corporation
© 2006 IBM Corporation
Why are Network Management and Security Event Management Converging?
Revenue Can’t deliver content without security.
Costs Opex pressure is forcing NOC/SOCs to merge Capex pressure on IP Convergence projects
Market Pressure Industry Consolidation - Acquisition history
Service Focus Security events are as likely to effect QOS as any other event.
![Page 4: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/4.jpg)
4
IBM Corporation
© 2006 IBM Corporation
![Page 5: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/5.jpg)
5
IBM Corporation
© 2006 IBM Corporation
Customer example 2
![Page 6: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/6.jpg)
6
IBM Corporation
© 2006 IBM Corporation
OSS Impact
The job of OSS systems has to move from identifying impacted infrastructure and devices to identifying (and resolving) impacted Services.
Data Sources– More Events, more data sources
Correlation– Need to identify the service effecting events from all the data.
Topology– More Topologies, layer 1 through 7, more arbitrary topologies for services, more
topologies that can’t be discovered. Service Models for Service Impact
– More layered services, more distributed services, faster service rollout, more kinds of service interdependencies and relationships
Advanced Visualization– At-a-glance understanding of service status required
.
![Page 7: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/7.jpg)
7
IBM Corporation
© 2006 IBM Corporation
Cross-Management Domain Correlation / Resolution for Service-Affecting Events (security-related):
– A service provider can’t download the movies fast enough to their set-top boxes
– A security event is flagged at the root-cause level; the problem is identified as a DOS attack on the DNS servers
Management domains correlated: Security Incident Management, Performance Management, Availability Management, BSM, RCA
![Page 8: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/8.jpg)
8
IBM Corporation
© 2006 IBM Corporation
Convergence
![Page 9: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/9.jpg)
9
IBM Corporation
© 2006 IBM Corporation
Charging models in a converged world
Must Charge for Services – Store your music library
– SMS to pay your bill Must Charge for Content
– Buy a ring tone
– Buy a movie (or TV Show)
– Stream commercials on the screen
Security– Content providers understand the value of their content
![Page 10: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/10.jpg)
10
IBM Corporation
© 2006 IBM Corporation
• Standard Network Management Metrics do not include Quality
1% packet loss (evenly distributed)
1% packet loss(i-frame)
1% packet loss(buffer discarding)
• 3 examples with same content, different problems and when do we care?
Beyond Performance and Availability Network Statistics
Reference
![Page 11: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/11.jpg)
11
IBM Corporation
© 2006 IBM Corporation
Active Networks
Consider downloading a program that understood which (application layers) packets could be dropped to each router along a path before the transmission occurred.
Consider security for Active Networks
![Page 12: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/12.jpg)
12
IBM Corporation
© 2006 IBM Corporation
![Page 13: The Converging Worlds of Network Management and Security Information Management](https://reader035.fdocuments.us/reader035/viewer/2022070401/5681366d550346895d9dfae4/html5/thumbnails/13.jpg)
13
IBM Corporation
© 2006 IBM Corporation
Summary
Network management used to care about availability and Performance but convergence will force us to care about quality and security.
Why – because it’s all about the service!