
| Editorial: a little too much material to publish ... |
| Here is no. 10 of our Newsletter and for the first time our Editor,
Nadia PARONI, has had to hold some material ready for publication, until
our next issue (since we don't want - yet? to print more than six pages
...)
So you will not read in this number about our participation in the new ETSI project on voice over IP, nor about our new Internet connection through the cable TV operator BRUTELE, and UNISOURCE. But you will read about many of our activities, and also discover yet more new faces of the group, including Denis AUQUIER who joined in February and Ebrahim N. MASHAYEKH who is visiting us for six months, on leave from Tehran. Still progressing on the New Paths of Knowledge ... Paul VAN BINST
ps: for those who look at these details, here is another
issue of the Newsletter without a picture of myself ...
|
![]() |
![]() |
| A strong STC delegation attended the JENC8 Conference in Edinburgh: E.N.MASHAYEKH, R. NAJMABADI KIA, M. DE PRETER, F. DABBARH, E. CHIRAZI and D. AUQUIER | The first EuroChinatel Conference took place in Beijing, co-organized by the European Commission and the Chinese government; Paul VAN BINST chaired a session on Telematics in Education |
| Using the SunNet Manager Platform to monitor European ATM activities | ||
| The SunNet Manager platform is a powerful tool for monitoring and statistics
collection of SNMP based networks like Ethernet, FDDI, Internet and ATM.
The platform is used since a few years for performance monitoring of our internal network as well as in different projects like TERENA ATM Task Force in 1995, EuroDemo and Task Force TF-TEN in 1997. There are some details about the SunNet Manager TEN-34 view which is one of our current projects. TEN-34 stands for Trans-European Network interconnect at 34 M bit/s which is the new high speed network for National Research Networks in Europe. One interesting feature of the platform is used here: the Management console can be used by many users simultaneously through the remote X window sessions. The users are the network experts from the different countries who participate in TEN-34 experiments. Thus a remote X window session enables on-line management view of TEN-34 ATM switches of National Research Networks participating in the TEN-34 project. These ATM switches participate in tests as edge devices of the TEN-34 ATM Overlay network. The communication between the Manager platform and ATM switches is realized through the traditional Internet with SNMP with agent entities using SNMPv1 and SNMPv2 and the manager entity using SNMPv1. Besides this, SNMP communication through the ATM Overlay network was tested between ULB/STC and UKERNA, United Kingdom. |
||
|
||
| Launch of TEN-34 | ||
| The formal launch of TEN-34 took place in Cambridge on May 20 and was
broadcasted on the Internet. The launch could be followed from the EuroDemo
room. For this purpose an ATM connection at a speed of 850 Kbps was set
up between the EuroDemo room and the MERCI headquarters at University College
London. Simon Holland from the European Commission followed the launch
in EuroDemo and took actively part in the discussion between the MERCI
partners, which was arranged as part of the program. The broadcast initially
suffered from a few technical problems due to the late delivery of the
ISDN line in Cambridge. Once the broadcasting in Cambridge was correctly
set up, the reception in the EuroDemo room was of a very good quality.
|
| Security consultancy for CIK | MIRTO | |||||
| CIK (Caisse Interbancaire -
Interbankaire Kassa) have the desire to acquire some Internet connectivity.
They already have a Web site (http://www.cik.be/), but it is hosted by
some service provider. For obvious reasons, they want to host this site
themselves, along with a more general connectivity for their employees
(e-mail, Web access, ...)
As the CIK holds some very sensitive data, they were aware that a good firewall would be an interesting investment. They asked STC to provide some consultancy about this would-be firewall. They asked us also how to put some security on their existing connections with their clients : these clients access CIK's on line applications through a variety of media : TCP/IP over leased lines and ISDN, X.25 through leased lines and Belgacom's X.25 PSTN, and some other means. We established a filtering policy for a packet-filtering firewall. However, such firewalls do not protect against some security flaws of the protocols, and we evaluated some application-level firewalls. These firewalls are the best ever built for the moment. The principle is quite simple : the advertised Web (or FTP, or whatever) server is the firewall machine. When it gets a request, the firewall inspects it to see if it is harmless, then forwards it to the real Web server, inside the protected area. The real server sends the answer to the firewall, which in turn sends this answer to the Internet. In this manner, the only visible machine is the firewall, and it contains no sensitive data, and is heavily protected from any known attack. CIK looked quite satisfied with the schemes we proposed.
It was a great pleasure to work with them : they were very aware that security
is important, and they fully agreed with Computer Security's Golden Rule
: everything that is not explicitly allowed, must be forbidden.
|
|
|
|
|
Our ULB Student Collaborators:Denis AUQUIER, Frédéric BRAS, Justin CASTERA, Ehsan CHIRAZI,
Other regular collaborators:Zlatica CEKRO, Rosette VANDENBROUCKE. Contact:Atika COHEN, Marie-Paule SPINETTE, Anne SPOIDEN (ULB Libraries), Yves BRANTS, Guy DEPIESSE, Daisy PIRNAY, Georges ROUSSEAU (IIHE/ULB-VUB), World Wide Web AddressService Télématique et Communication - Professor Paul VAN BINST http://www.iihe.ac.be |