Cyber Situation Awareness via IP Flow Monitoring

Publikace nespadá pod Filozofickou fakultu, ale pod Ústav výpočetní techniky. Oficiální stránka publikace je na webu muni.cz.

Autoři

JIRSÍK Tomáš ČELEDA Pavel

Rok publikování 2020
Druh Článek ve sborníku
Konference 2020 IEEE/IFIP Network Operations and Management Symposium (NOMS 2020)
Fakulta / Pracoviště MU

Ústav výpočetní techniky

Citace
Klíčová slova cyber situation awareness; IP flow; monitoring; network; real-time; host identification
Přiložené soubory
Popis Cyber situation awareness has been recognized as a vital requirement for effective cyber defense. Cyber situation awareness allows cybersecurity operators to identify, understand, and anticipate incoming threats. Achieving and maintaining the cyber situation awareness is a challenging task given the continuous evolution of the computer networks, increasing volume and speeds of the data in a network, and rising number of threats to network security. Our work contributes to the continuous evolution of cyber situation awareness by the research of novel approaches to the perception and comprehension of a computer network. We concentrate our research efforts on the domain of IP flow network monitoring. We propose improvements to the IP flow monitoring techniques that enable the enhanced perception of a computer network. Further, we conduct detailed analyses of network traffic, which allows for an in-depth understanding of host behavior in a computer network. Last but not least, we propose a novel approach to IP flow network monitoring that enables real-time cyber situation awareness.
Související projekty: