NSF International Research Network Connections (IRNC) Program

IRNC Program Kickoff

March 11, 2005

Overview of IRNC Program

• 2004 Solicitation (NSF 04-560, see www.nsf.gov)• “NSF expects to make a small number of awards to

provide network connections linking U.S. Research networks with peer networks in other parts of the world”

• “The availability of limited resources means that preference will be given to solutions which provide the best economy of scale and demonstrate the ability to link the largest communities of interest with the broadest services”

• Follow-on to “High-Performance International Internet Services” (HPIIS) 1997

IRNC cont’d

• Program Funding - $5M per year• Cooperative agreements for up to 5 years• Some continuing and new emphasis areas

– In support of Production r&e traffic– Cohesive organization and architecture– “geographic sensibility”– “pay for what we need”– Measurement– Security

2005 IRNC Awards

• Pacific Rim– #0441102 – GLORIAD, Greg Cole– #0441096 – TransPAC2, Jim Williams– #0441119 – Translight/Pacific Wave, John

Silvester

• Europe– #0441094 - TransLight/StarLight, Tom DeFanti

• Latin America– #0441095 – WHREN, Julio Ibarra

Awards - Other

• Africa: #0451384 SGER – “Extending High Bandwidth Academic and Research Networking to Africa”– PI George Sadowsky (Internews Network) 9/1/04 start– Develop plan to extend connectivity to African countries

(Ghana, South Africa, Mozambique, Madagascar, Senegal, possibly others)

• IRNC Measurement– #0457404 SGER - “Network Measurement for International

Connections”, PI Matt Zekauskas (UCAID, Internet2)– #0XXXXX SGER – [2nd SGER Award in this area not officially

made yet ]– Investigate approaches and help develop guidelines for common

measurement capabilities and metrics across IRNC connections

Goals Today

• Finally sit down together as a whole group! (we can check this off now)

• Expose your activities to key decision makers in OISE, etc.– * this day is really about hearing from you *

• Share with IRNC awardees NSF’s desired outcomes• Raise and understand open issues, what challenges lay

ahead, etc.• Discuss all the opportunities that lay ahead• Define an initial organizational structure (a fancy term for

setting up regular meetings)

Desired Outcomes from IRNC

• The Primary Goal – enable U.S. science&engineering in the international context to the most effective degree possible

• All other goals, directives, policy, and decisions derive from this goal

Opportunities and Challenges for IRNC

• Increase capacity and reach into new and existing regions• Deploying new networking technologies driven by production

needs– E.g. Insertion of layer2 and “hybrid” services

• Leverage one another’s resources where feasible– Not just capacity, * tools and ideas too *– Not just ideas and tech from within IRNC (e.g. EIN)

• Maintain and build strong relationships with colleagues and partners outside U.S.

• Opportunities to contribute directly to the Network Research community

• Doug has slides on Security• Measurement in one moment…

A few words about SCI for Context

• The post ACIR/ANIR world at NSF• SCI delivers capability in the form of shared

cyberinfrastructure– Who “shares” this CI? The constituencies [the scientists,

researchers, and educators funded by NSF] of (client) directorates across NSF

– But not NSF-exclusive• The pursuit of scientific discovery is a global endeavor, now

more than ever• FY06 NSF Budget description of CI, the last line reads: “Over

time, NSF investments will contribute to the development of a powerful, stable, persistent, and widely accessible cyberinfrastructure to enable the work of science and engineering researchers and educators across the nation and around the world.”

Measurement…

• “so what is kevin’s hangup with this measurement stuff?”• Perspective

– Measurement is not the top priority for IRNC, nor is it a near-term urgency

– However, we have *many* opportunities to establish leadership in networking in IRNC, particularly through measurement

– NSF has existing investments in measurement infrastructure that can/should be leveraged (NLANR PMA nodes overseas)

• The expert review panel cited this area repeatedly• By the way, NSF will have detailed visibility into usage

– For a basic understanding of ROI– In pursuit of quantitative metrics for evaluation

• Attractive environment for introduction of advanced platforms,e.g. OCxMONs and BRO

• Eventual resource for research on network traffic• The Matt Zekauskas and Matt Mathis show…

Talking Points by Awardees Today

• Cover details of interconnectivity• Identify connectivity w/ Abilene• Include dates, timelines, and current status• Describe monitoring plans and problem resolution framework• Outline science&engineering collaborations/projects enabled• Address relevant opportunities for coordination w/ other IRNC

award activities (how can you provide resources to, and leverage resources from, other [IRNC] awards?)

• Address challenges – political and technical

Evolution of International Connections

•ICM – NSFNet extension

•HPIIS – transition from federal network

•IRNC – support of cyberinfrastructure

IT Security for Federally funded infrastructure

•OMB Circular a-110

•FBI Case 216 (aka Teragrid Incident)

•CyberSecurity Summit 2004

Scope of CyberSecurity Summit

•User Policies/Education

•System Admin Policies/Education

•Network Based Intrusion Detection

•Host Based Intrusion Detection

•Grid Security

ConclusionsCyberSecurity Summit

•Deficient communication between facilities

•Weak trust relationships

•Lack of coordination

 Needs:

––Procedure to notify users/customersProcedure to notify users/customers

––Procedure for notifying peer sitesProcedure for notifying peer sites

––Define protocol to alerting legal authoritiesDefine protocol to alerting legal authorities

––Instructions on public relations issuesInstructions on public relations issues

NSF Efforts

•Security Working Group for large facilities

•Changing wording in grants and contracts

•IT security will be part of site reviews

•Best Practices & Security Plans

Opportunities

•Share best practices

•Engage network engineers

•Facility communication channels

•Share information

•Provide early detection and forensics

•Assist law enforcement