This talk presents various aspects and challenges of monitoring and security of a big research network while keeping it open and usable.
We focus on issues faced due to following attributes:
1. Decentralization
2. High Speed
3. BYOD policy
4. Openness
We further provide insights into our detection and incident response process using some real world examples and how above attributes influence this process.