So I'm Levi Perigo,
I'm full time faculty in TCP Department,
and my focus is on, Network Engineering,
so, I like to tell my students,
whether everyone knows it or not,
these are some of the most important jobs in the world,
because nothing works without a network,
right, you can't have internet space connectivity,
you can't have wireless connectivity,
nothing works without the network.
So, so my focus and my research is on,
on Network Engineering, and specifically
Software Defined Networking,
which I'll talk a little bit about it today.
So, in addition to my full time faculty here at,
at C-U, I'm also a Research Associate for the network,
Open Networking Foundation,
so if you're not familiar with that,
what we work on is if we had to do networking
all over again, start from scratch, what would we do?
Right, so it's all open source, it's Linux-based,
it's pretty much now the new model,
which is Software Defined Networking is,
based on the computer server industry.
Right, you can modularize, you can take and pick and choose
what you want, so that's how the networking world is moving.
In addition to that, I'm a Subject Matter Expert
for the Research Council MEF on their SDN/ NFV,
and what we're working on there is,
we're creating a global API for the internet,
so an application programmable interface,
so that any Internet Service Provider in the world
can say I wanna connect from point A to point B,
and it'll connect through multiple service providers
by using one global API.
So in addition to that,
I'll tell you a little bit about software-Defined Security.
So anything Software Defined is the kind of new networking
paradigm, Software-Defined Networking,
and what that is, is we're wanna have a centralized
controller or brain, right,
so think of logically centralized
but physically distributed,
but we have that one brain
that knows everything about the entire network, right?
So, think of that from a security perspective,
no longer is it box-by-box decisions or box-by-box security,
I have one brain that knows
every single device in my network.
So think about that from security, right?
If something enters my network, that's bad,
I can block it not only there,
but I can block it anywhere else in my network
so that it never tries to attack from a different place,
it can't manipulate itself.
Okay, so, so a few of the things that,
that we're doing is, with SDN, right,
we're using applications or software programmability,
to manage and change our network.
So one current one that we're working on is,
is distributed denial of service,
we can detect that and mitigate that.
So with a, a larger Internet Service Provider in Denver,
we, we posted a honey pot.
If you're familiar with that term,
it's a, a public facing server that allows access
and they think, "Oh, we're attacking this server."
Well, we do it for two reasons,
one, a large Internet Service Provider,
if their network is now kind of running on servers
and software, what we can do is if we receive an attack,
we can just spin up another virtualized version
of that server, and then another one,
and another one and another one.
As far as the Internet Service Provider is concerned,
it's just like they're getting a lot of traffic
to their website, they don't care,
they just spin up another one.
And their argument is, "Well, I have more compute power
"than anybody who can attack me.
"So I just spin up a new one, spin up a new one,
"and spin up a new one."
Okay, so that's part of it,
but what we're doing on the back end,
is we're capturing all this data so that we can see,
"Hey, we have a public facing device,
"what kind of attacks are we getting?"
Okay, and that leads to phase two,
where we use machine learning to prevent this in the future.
Okay, so, so part two here is
the Intrusion Detection and Prevention,
so with SDN,
Snort
is a popular security,
we can have signatures that come in,
"If you see this signature, take some action," right,
so with SDN, we can program it to say,
"Hey, anywhere in your network, if you see this security
"vulnerability, go ahead and take action A, B, or C."
Okay, so we can do that right now,
but what we're doing with phase two is
we have all of this data, right,
we have a public facing web server,
anybody who attacks that, we're capturing all of that.
So we can train our machine learning algorithm
in a three-phased approach.
So for example, "If you see a brute force password attack,
"or if you see five in a minute, take one action,
"if you see 50 in a minute, take a different action,
"if you see 1000 in a minute, take a third action," right?
So similar to you, you know if you're
putting your hand towards a flame,
like the closer it gets, your brain says,
"All right, you need to start thinking about backing it off,
"okay, that's really high,
"okay, you're in big trouble," right?
So we're doing that same thing with machine learning of
once we can classify all these attacks,
we can start to train our system and our network to say
"This look like an attack, make this change,
"this is even a bigger attack, make a bigger change,
"or all systems are gonna be down, read over everything,
"change everything, add these security policies, block this,
"and, if you see something like this again,
"the first time, don't provide the warning,
"just block it straight away."
Right, that's how we're training our,
our machine learning algorithm.
But all of these things with Software Defined Networking,
right, it doesn't matter anymore,
it's not limited to physical boxes,
its cloud, its data center virtualization,
traditional, space, terrestrial, right,
if everything software,
it doesn't matter on physical boxes anymore,
cause we can program it to do whatever we want.
So I'm Levi Perigo, I have my contact on the,
on the first slide, but I'm,
I'm super passionate about this,
if you have any questions, please let me know, thanks.
[audience clapping]
[dramatic music]