SP安全演进CT.ppt

Anti - Botnet 3G业务部署 BTS BSC/PCF PDSN R-P Interface Visit AAA MSC/VLR SS7 HLR Home AAA Home Agent SMSC IP Network PDSN＋AAA分类手机接入地址 VIP客户通过ＡＳＡ上互联网 ＶＰＮ加密 ＢＴＦ ＩＰＳ／ＣＳＣ BTS PL R-P Airlink LAC MAC IP MAC Airlink LAC MS PDSN PL Link Layer R-P PL IP PPP PPP IP/IPsec GRE GRE CDMA2000 1x 空口资源释放 流量计费保护 Anti-Botnet (BTF) BTF – Anti- Botnet IPSEC/SSL Internet IDC业务 安全服务中心 PBR VRF 安全接入中心 SSLVPN 安全监控中心 Netflow v9 MARS 总结 安全威胁与云技术演进 木马僵尸网络 内容数据安全 SaaS安全暨服务架构 云安全服务 安全自服务 “云”火墙与入侵检测 Anti-botnet IPS Global Correlation  * * * * Why？ * * Attached is a summation of the?thoughts and comments from the last SP Marketing meeting. In essence, the changes include: ? - Labeling the transitions - Revamping the 6 pillars to a defined context and four pillars - Security Role replacing security technology * Devices that access threat data contribute to the data. SensorBase already has over 100,000 contributing networks from around the world. NetFlow and other data from Carriers and ISPs extend the footprint even further. Cisco is seeing more attacks, viruses and spam than any other vendor. The SensorBase database grows in size and depth each time its queried by devices, and each time network participation uploads an activity summary. SensorBase is queried by devices over 5 billion times per day. It tracks over 200 different parameters on internet hosts, relating to their behavior, reputation and security risk. SensorBase is many times larger than other security tracking databases, and this provides much greater accuracy and protection for customers. As an example, IronPort Email Security Appliances see new email viruses as soon as they’re released into the wild, and share this data with Cisco SIO. The TOC is able to publish new outbreak rules an average of 13 hours ahead of Anti-Virus vendors. We track our partners as well as their competitors, and Cisco consistently reacts faster. ----------- It’s not just the depth of the data that’s important – size matters, too. SenderBase has a