BristolIsOpen - digital test bed SDN

ggnfs000 · December 18, 2016, 03:49:21 PM

Any other city that are entirely dedicated for testing SDN?
https://www.youtube.com/watch?v=pqYg219CiKA

Cisco has been talking a lot about Songdo in S.Korea but that appears just couple of apartment blocks connected by video terminals.

deanwebb · December 19, 2016, 03:57:35 PM

So, I basically just watched 2 minutes and 36 seconds of a "COME AT ME, BRO!" video intended for the recreational hackers of the world...

ggnfs000 · December 21, 2016, 01:44:07 AM

it is got lot of good names and terms:
programmable city
experimentation as a service
data dome
sdn
5G.

Not sure how good it is boding well.

In one hand SDN looks like taking over the networking but if i google "is sdn dead" there are plenty of articles that supports this too. I am not sure which way it is really going.

deanwebb · December 21, 2016, 08:22:35 AM

I'm waiting for when vendors stop supporting some of the IoT gear they've bought fresh and new today, or when an update patch introduces a bug that takes a good long while to resolve because it's hard to tell if it's a bug or a DDoS affecting the system.

Also waiting for the DDoS that is sure to fall upon that fair city.

ggnfs000 · December 22, 2016, 01:20:27 AM

oh i aint gonna get started on that one. I think IoT is gonna be mess in terms of security. Nobody cares about security in IoT because it is too expensive to secure. It is likely end of universe come sooner than all IoT become secure ever. It is all about margin and iot security severely erodes margin.

During SDN meetup, lots of intellectual talks but then one senior guy brought up how IPsec is faring in SDN land and everyone has gone through rude awakening.

deanwebb · December 22, 2016, 10:07:50 AM

That margin comment of yours is dead on the money.

Biggest problem is that all computing platforms, and this goes back even to Bletchley Park, were built up without security in mind. Job one was to get them working and then hope enough of the 4Gs - Guards, Gates, Guns, and doGs - would keep them secure. All that thinking had to be revised when computers were accessed via remote terminals and even more so after they were networked.

No revision in thinking has happened. Get the damn things working and ship that product. If there's a security issue, we'll patch it without changing the underlying operations so that we won't need to make another patch...

Being a security guy means I get to drink fresh-squeezed dream juice and unicorn tears whenever I'm invited to a planning meeting...

I think SDN can make a good case for the datacenter or as an outgrowth of a NAC system that actually has teeth, but to put it into play in an urban area of over a million people, loaded with IoT backdoors, is irresponsible in my view.

Leaving malicious or accidental hacking out of the picture, what happens when they upgrade from IOS X to Y and a bug in how Y does spanning-tree brings down the network?

OK, we can make the argument that we use networks just fine in many sensitive environments, including banks, government installations, hospitals, and nuclear fuel enrichment facilities. To which, I respond: JP Morgan breach, US federal personnel database breach, ransomware that held hospitals hostage, and stuxnet. Do we really want a scenario in which some layabout with a TOR browser is able to rent a DDoS to shut down a city unless they cut him a check, payable to a Bitcoin wallet?

ggnfs000 · December 25, 2016, 03:56:05 PM

oh yeah. possibilities for hackers are mind boggling and seems brighter than ever. great to be a hacker.

deanwebb · December 28, 2016, 08:46:30 AM

Quote from: ggnfs000 on December 25, 2016, 03:56:05 PM
oh yeah. possibilities for hackers are mind boggling and seems brighter than ever. great to be a hacker.

... unless you're a hacker living in Bristol, as Bristol is being hacked.