Technology Services at Illinois: Network Security Monitoring and Attack Blocking

Technology Services at Illinois operates network security monitoring and attack blocking tools.

Internet traffic entering and leaving the Urbana campus is analyzed for indicators of cyberattack using the network security monitoring software zeek.

When an attack is detected, connectivity with the attacker is automatically blocked. The length of the block depends on the number of previous blocks for the same IP address.

Only metadata describing the traffic is captured and analyzed; the content of traffic is not captured or analyzed.

A copy of some Internet traffic entering campus may be forwarded to the Refraction Networking project.

KeywordsNSM nullrouter null router BHR   Doc ID110915
OwnerSecurity S.GroupUniversity of Illinois Technology Services
Created2021-05-19 16:06:53Updated2023-08-02 12:45:25
SitesUniversity of Illinois System, University of Illinois Technology Services
Feedback  0   0