IPv4 and IPv6 Greynets

Abstract

Darknets are large, contiguous blocks of unused IP addresses, passively monitored for externally sourced anomalous traffic. Greynets are a region of IP address space that is sparsely populated with darknet addresses interspersed with active (or 'lit') IP addresses. By deploying a greynet on an enterprise network, an administrator can successfully detect anomalous
traffic without the issues of darknet deployment.

This presentation will briefly recap what greynets are, how they have been implemented in the past and outline the new method of implementation as outlined in the Internet-Draft (soon to be RFC) 'IPv4 and IPv6 Greynets'.

About the presenter

Warren holds a BEng(Hons)(Telecommunications and Internet Technologies) and a BAppSc(Multimedia Technologies) from Swinburne University of Technology.
He is currently a PhD candidate with The Centre for Advanced Internet Architectures.

More information can be found at http://caia.swin.edu.au/cv/wharrop