At ITU in Hong Kong this week, IBM unveiled security hardware, software and services for the core of service provider networks that underpin new IP-based voice, video, push-to-talk and presence services.
The Telecom Core Infrastructure Security Solution monitors and manages the health of network and traffic through a single integrated system, IBM says. It offers early anomaly detection and mitigation options that allow network operators to take action and enforce policy either manually or automatically.
As the telecom industry redirects efforts toward launching and delivering IP-based services -- telephone services over the Internet, Internet TV, push to talk and instant messaging -- they have become vulnerable to a "new breed" of attack, IBM claims, designed to cripple the key components and networks that deliver these new services.
IBM's new security solution comprises several components:
-Tivoli Security Operations Manager provides the monitoring and correlation of the events from security components, such as firewalls and intrusion detection systems.
-NarusInsight Secure Suite from Narus provides monitoring and correlation of all of the traffic that flows across the carrier network.
-Tivoli Netcool software then acts as the "manager of the managers," providing an additional tier of correlation between Tivoli Security Operations Manager and NarusInsight Secure Suite.
-IBM BladeCenter servers, and integration, delivery and support services.
Also at ITU, Telco Systems introduced two hub blades that deliver Ethernet connectivity to AdvancedTCA (ATCA) platforms.
Telco Systems' T-Hub1 and T-Hub2 blades offer high-bandwidth multi-layer networking, with separate base and fabric interface switching for enhanced security. They run Telco Systems' BiNOS network operating system.
The blades are designed to provide the building blocks that enable telecom equipment manufacturers to deliver applications such as IP Multimedia Subsystem (IMS), media gateways and call servers. The T-Hub blades provide full separation between base and fabric interfaces, supporting 1G Ethernet and/or 10G Ethernet or multi-rate ports.
These modules provide fabric interface connections of Gigabit Ethernet and Fibre Channel to all 23" ATCA chassis slots. 10G Ethernet uplinks and multiple Fibre Channel front interfaces provide traffic aggregation.
BiNOS network software delivers switching, IPv4/IPv6 routing, MPLS, QoS, security, VPN switching and routing, ring-attached resiliency with sub 50ms protection, and wire speed Layer 2-4 networking.