Kolloquium WiSe 2018-19

Speaker

TU Ilmenau

When: Mo, 17.12.2018, 17:00

Where: Room B-201

Topic

Distributed Auto-Configuration of Large Virtual Private Network
Infrastructures with “Secure Overlay for IPsec Discovery (SOLID)”

Language: English or German, according to preference

Abstract

The manual configuration of large, dynamic, or nested virtual private network (VPN) infrastructures based on the IPsec suite of protocols often involves significant amounts of costs in terms of labor and time. Established approaches to automate the involved tasks have significant functional and non-functional drawbacks; some even crucially weaken the VPN security below acceptable levels. Motivated by this, we developed SOLID, which allows for self-configuring and -repairing VPNs. All common functional requirements, i.e. support for private IP address ranges, are fulfilled, while not weakening security. The scalability, efficiency, and robustness of the corresponding carrier-grade product line have been demonstrated in the government infrastructure of a large German region (Bundesland), comprising of more than 2,000 sites. The presentation will present the main ideas and design choices of the SOLID technology and report on our experiences with its introduction as well as on operation & management related challenges.

Bio

During my studies at the University of Karlsruhe, Germany, and various student jobs (Oct 1989 to Sep 1994) I gained intensive knowledge in the areas of computer networking and telecommunications, network security, and network management. From October 1994 to January
1999 I have been a researcher at the Institute of Telematics at the University of Karlsruhe. In July 1999 my Ph.D. thesis (Oct 1998) was awarded with the "Klaus Tschira Preis für verständliche Wissenschaft 1999", an award given annually by the University of Karlsruhe to Ph.D. students for outstanding comprehensibility of their thesis. Between February 1999 and July 2000 I was a postdoctoral researcher at the Département Informatique et Réseaux of the Ecole Nationale Supérieure des Télécommunications in Paris, France, mainly working in a research project investigating the performance of the new ATM adaptation layer type 2 in the access network of third generation mobile networks. Between August 2000 and March 2005, I was working at the Telecommunication Networks Group of the Technical University Berlin, Germany, with my research interests
lying in the areas of network security, mobile communications, high performance communications, active networks, and network management. In April 2005, I have been appointed head of the research group "Telematics/Computer Networks" at Technische Universität Ilmenau.

Contact

Prof. Dr. Mathias Fischer