Abstract: Science DMZ Security Issues

Presenter(s): Michael Sinatra, ESnet

Many campuses are deploying Science DMZ networks in one form or another. Naturally, concerns are being raised about the security of the Science DMZ, as this model uses non-traditional security mechanisms. This presentation will discuss various techniques currently being employed to provide robust security for the Science DMZ.

By viewing the Science DMZ as a “security architecture,” the design can be tailored to mitigate the precise set of risks that arise with this model. The presentation will show how a Science DMZ model can improve the traditional security model of other systems, such as the systems that manage laboratory instruments. Additionally the presentation will show how SDN can provide granular flow management into and out of the Science DMZ.