D
2020
Cyber Situation Awareness via IP Flow Monitoring
JIRSÍK, Tomáš a Pavel ČELEDA
Základní údaje
Originální název
Cyber Situation Awareness via IP Flow Monitoring
Autoři
JIRSÍK, Tomáš (203 Česká republika, garant, domácí) a Pavel ČELEDA (203 Česká republika, domácí)
Vydání
Hungary, 2020 IEEE/IFIP Network Operations and Management Symposium (NOMS 2020), od s. 1-6, 6 s. 2020
Nakladatel
IEEE Xplore Digital Library
Další údaje
Typ výsledku
Stať ve sborníku
Stát vydavatele
Česká republika
Utajení
není předmětem státního či obchodního tajemství
Forma vydání
elektronická verze "online"
Kód RIV
RIV/00216224:14610/20:00115562
Organizace
Ústav výpočetní techniky – Masarykova univerzita – Repozitář
Klíčová slova anglicky
cyber situation awareness; IP flow; monitoring; network; real-time; host identification
Návaznosti
EF16_019/0000822, projekt VaV.
V originále
Cyber situation awareness has been recognized as a vital requirement for effective cyber defense. Cyber situation awareness allows cybersecurity operators to identify, understand, and anticipate incoming threats. Achieving and maintaining the cyber situation awareness is a challenging task given the continuous evolution of the computer networks, increasing volume and speeds of the data in a network, and rising number of threats to network security. Our work contributes to the continuous evolution of cyber situation awareness by the research of novel approaches to the perception and comprehension of a computer network. We concentrate our research efforts on the domain of IP flow network monitoring. We propose improvements to the IP flow monitoring techniques that enable the enhanced perception of a computer network. Further, we conduct detailed analyses of network traffic, which allows for an in-depth understanding of host behavior in a computer network. Last but not least, we propose a novel approach to IP flow network monitoring that enables real-time cyber situation awareness.
Zobrazeno: 22. 5. 2025 07:08