Toss Attackers Into a Black Hole with Open-Source Software

Wednesday, April 20, 2016 | 9:00AM–10:00AM | Grand Ballroom I, Grand Level, Fourth Floor
Session Type: Professional Development
UC Santa Cruz implemented an automated incoming remotely triggered black hole (RTBH) routing solution using open-source software (except for the border router itself). We used Bro for detection, Justin Azoff's BHR for the queue and API endpoint, Quagga for the trigger router, and a little Python to glue it together. Come see and hear how you can do it too.


OUTCOMES: Learn about UC Santa Cruz's automated incoming RTBH routing solution * Learn about open-source software that may be useful to other institutions wishing to implement RTBH

Presenters

  • Forest Monsen

    Senior Information Security Analyst, University of California, Santa Cruz

Resources & Downloads

RTBH presentation notes
60 KB, PDF
Uploaded on 05/03/2016
Quagga routing software
5 KB, Off-site resource
Uploaded on 05/03/2016
Code for the BHR Client
Off-site resource
Uploaded on 05/03/2016
Code for the BHR Bro integration
Off-site resource
Uploaded on 05/03/2016
Code for the BHR API Endpoint
Off-site resource
Uploaded on 05/03/2016
Cisco whitepaper on RTBH
983 KB, Off-site resource
Uploaded on 05/03/2016
Bro download
19 KB, Off-site resource
Uploaded on 05/03/2016