A practical guide to hardening MPLS networks Define the "zone of confidence" for your MPLS VPN environment Understand fundamental security principles and how MPLS VPNs work Build MPLS VPN model that defines the threat of attack points, such as VPN separation, VPN spoofing, DoS against the network backbone,? Misconfigurations, sniffing, and inside attack forms Identify VPN security requirements, including resistance against attacks, hiding of the core infrastructure, protection against spoofing, and ATM / Frame Relay comparison Interpret complex security architectures such as extranet access with recommendations of the Inter-American , carrier-supporting carriers, Layer 2 security considerations, and multiple provider trust model issues Operate and maintain a secure MPLS core with industry best practice Integrate IPsec into your MPLS VPN for extra security in encryption and data origin verification Build VPNs by interconnecting Layer 2 networks with new available architectures such as virtual private wire service (VPWS) and virtual private LAN service (VPLS) Protect your core network from attack by considering Operations, Administration, and Management (OAM) and MPLS backbone security incidents Multiprotocol Label Switching (MPLS) is a technology becomes widely used, specifically for providing virtual private network (VPN) services. Organizations deploying MPLS VPNs need security best practices to protect their networks, especially for more complex deployment models such as inter-provider networks and Internet provisioning on the network. MPLS VPN Security is the first book to address the security features of MPLS VPN networks and to show you how to harden and securely operate an MPLS network. Drawing on the author? experience in attack mitigation and infrastructure security, MPLS VPN Security is your practical guide to understand how to effectively secure communications in an MPLS environment. "The authors of this book, Michael Behringer and Monique Morrow, have a deep and rich understanding of security issues, such as the prevention of denial-of-service and protection of network infrastructure vulnerabilities. Ullal, Senior VP / GM Security Technology Group, Cisco Systems