Library items tagged:

Link to the Janet videoconferencing booking service. Registered users can book or launch videoconferences and view the details of videoconferencing facilities at any of the Janet Videoconferencing registered organisations.

Necessary information: [  ] Title of conference (See 2.1) [  ] Purpose of conference (See 2.1) [  ] Start and end dates (See 2.1) [  ] Start and end times (See 2.1) [  ] Name of conference coordinator (See 2.1) [  ] E­mail address/phone number of conference coordinator (See 2.1) [  ] List of venues for the conference (See 2.2) [  ] Names of main attendees at each venue (See 2.2) [  ] Guest venue (if included), does it have an IP or ISDN CODEC? (See 2.2) [  ] Guest venue E.164 number/ISDN number/IP address (See 2.2)

Executive Summary

In this particular incident, the initial tip-off led directly to the departmental network containing the compromised hosts. This information is not always so readily available, since IP spoofing can also be used to simulate traffic from machines on many different networks. Such a situation could be handled by repositioning the network monitor on the backbone (at M’ in the diagram, for example), and again examining the source MAC addresses of attack packets (but note that performance is likely to be a concern, with monitors dropping traffic at gigabit speeds).