Detailed Information on Publication Record

@inproceedings{39101,
   author = {Velan, Petr and Jirsík, Tomáš},
   address = {Budapešť},
   booktitle = {2020 IEEE/IFIP Network Operations and Management Symposium (NOMS 2020)},
   doi = {http://dx.doi.org/10.1109/NOMS47738.2020.9110361},
   keywords = {network; flow; expiration; timeout},
   howpublished = {elektronická verze "online"},
   language = {eng},
   location = {Budapešť},
   isbn = {978-1-7281-4973-8},
   pages = {1-7},
   publisher = {IEEE Xplore Digital Library},
   title = {On the Impact of Flow Monitoring Configuration},
   url = {https://ieeexplore.ieee.org/document/9110361},
   year = {2020}
}

TY  - JOUR
ID  - 39101
AU  - Velan, Petr - Jirsík, Tomáš
PY  - 2020
TI  - On the Impact of Flow Monitoring Configuration
PB  - IEEE Xplore Digital Library
CY  - Budapešť
SN  - 9781728149738
KW  - network
KW  - flow
KW  - expiration
KW  - timeout
UR  - https://ieeexplore.ieee.org/document/9110361
N2  - Flow monitoring has become an essential source of information for intrusion detection systems and various forms of network data analytics. However, the attention of researchers is focused primarily on the utilisation of the flow data, and the process of flow data creation is often neglected. This lack of consideration negatively affects the results of data analytics. Either the results are suboptimal due to the low quality of the flow data, or a description of the configuration of the flow monitoring system is missing, which leads to irreproducible results. The goal of this paper is to demonstrate how the configuration of the flow monitoring system affects the resulting data. The most basic flow monitoring configuration variables are the flow expiration timeouts. We analyse their effect on the number of created flow records to show their importance. Moreover, we demonstrate that the choice of the flow expiration timeouts can have a severe impact on the network data analytics. The use-case of Slowloris attack detection is used as an example to illustrate this fact.
ER  - 

VELAN, Petr and Tomáš JIRSÍK. On the Impact of Flow Monitoring Configuration. Online. In \textit{2020 IEEE/IFIP Network Operations and Management Symposium (NOMS 2020)}. Budapešť: IEEE Xplore Digital Library, 2020, p.~1-7. ISBN~978-1-7281-4973-8. Available from: https://dx.doi.org/10.1109/NOMS47738.2020.9110361.