TWAREN (TaiWan Advanced Research and Education Network) is a hybrid network composed of several types of network services including Layer1 (Light-path), Layer2 (VLAN, MPLS-VPN and VPLS-VPN), Layer3 (research networks peering and transit) and Layer7 (SSL VPN). To develop a network management system for such kind of hybrid networks, we must firstly be able to construct the physical network topology, therefore the logical network services can then be mapped and an accurate monitoring and alarming system can be possible. However the automatic physical topology discovery is extremely hard and complicated in the hybrid network. In this paper, we propose our preliminary design on automatically detecting the hybrid network physical topology in TWAREN.

Defender Cloud is a cloud based backbone network defending system having full scope over the whole backbone network. Rather than detecting suspicious network activities on a local area network, it collects and integrates the flow data from all connecting members and all entrances of a backbone network. After analyzing by a proposed cloud based distributed processing model, the corresponding defensive reaction can be carried out in a global basis. Thus its protection can cover the whole network, even including member institutions without their own firewall. This paper illustrates the design, verification and future perspective of the Defender Cloud, with an emphasis on the distributed processing of the flow data.