Do you know how long will it take for the world to have our next cyber crime victim? By the time you read up to this point there are already 100 more! As network operator, what are the three tips you would not want to miss to safeguard your users better?

The risk for ISPs/Data Centre Operators
– The rate at which vulnerabilities emerge
– Some examples of ISP compromise and the impact
– The Continuous Vulnerability Management methodology
– Benefits/conclusion

For my presentation titled APNIC policy updates and IPv4 address transfer, I will talk about policies that were recently implemented by APNIC, the highlights of the policies discussed at APNIC 39 including the new confer tool. For IPv4 transfers, I will share stats for different transfers, demo of how to process transfers from MyAPNIC and also transfer services that are currently provided by APNIC.

For the last seven years, my research group has been developing a suite of new Internet path-quality measurement tools, systems, and platforms. We have deployed them to continuously monitor the HARNET’s performance and to help troubleshoot various local and remote performance problems. In this talk, I will introduce the network measurement technology that we have developed and present measurement case studies. At the end, I will also introduce our new initiative of conducting residential broadband measurement in Hong Kong.

Bio:
Rocky is leading an Internet Infrastructure and Security Research Group, tackling network measurement, network security, and network operations and management problems. In 2001, he was awarded the First Runner-Up in the Faculty of Engineering’s Best Teacher Award and in 2011 and 2012 the Faculty’s Industrial and Engineering Services Grant Achievement Award. He recently also received the Most Active New Consultant Award (Merit) in the PTeC’s Outstanding Professional Services Awards. He is a member of IEEE and ACM, and frequently attends APRICOT and APAN conferences.

This year is the 20th Anniversary of HKIX. HKIX has experienced steady growth during the last 20 years. To cope with the growth, a lot of changes and upgrades had been done already. For the IPv4 address block currently used for HKIX Public Peering LAN (202.40.160/23), HKIX has already used up more than 80%. In order to cope with the continuous growth of HKIX and having learnt from the experience of other IXPs around the world, HKIX has decided to perform IPv4 address renumbering for HKIX Public Peering LAN during 12-15 Jun 2015 HKT. At this session, the speaker will provide more details about the renumbering exercise. Besides, other updates about HKIX development will be covered.

This presentation will talk about building and optimizing BGP Anycast networks. While BGP Anycast by Root Server operators is well known, this presentation will look at going beyond that and building your own for supporting different parts of your network operations. The presentation will also look at how Anycast performance differs in v4 and v6, as well as how it’s used by CDN operators.

Cisco Intelligent WAN (IWAN) Architecture:
Cisco Intelligent WAN solution provides design and implementation guidance for organizations looking to deploy wide area network transport with:
– a transport-independent design
– intelligent path control
– application optimization
– and secure encrypted communications between branch locations while reducing the operating cost of the WAN.
IWAN takes full advantage of cost-effective transport services in order to increase bandwidth capacity without compromising performance, reliability, or security of collaboration or cloud-based applications.

Illustrate the use of honeypot to discover the Indicators of Attack, such as ssh brute force and DNS DoS attack.