Další formáty:
BibTeX
LaTeX
RIS
@inproceedings{55386,
author = {Špaček, Stanislav and Čeleda, Pavel},
address = {Neuveden},
booktitle = {Proceedings of the 12th International Conference on Autonomous Infrastructure, Management and Security (AIMS 2018)},
keywords = {intrusion detection; network flows; network logs; encrypted traffic},
howpublished = {elektronická verze "online"},
language = {eng},
location = {Neuveden},
isbn = {978-3-903176-12-6},
pages = {6-10},
publisher = {IFIP},
title = {Threat Detection Through Correlation of Network Flows and Logs},
url = {http://www.aims-conference.org/2018/AIMS-2018-Proceedings.pdf},
year = {2018}
}
TY - JOUR
ID - 55386
AU - Špaček, Stanislav - Čeleda, Pavel
PY - 2018
TI - Threat Detection Through Correlation of Network Flows and Logs
PB - IFIP
CY - Neuveden
SN - 9783903176126
KW - intrusion detection
KW - network flows
KW - network logs
KW - encrypted traffic
UR - http://www.aims-conference.org/2018/AIMS-2018-Proceedings.pdf
N2 - A rising amount of mutually interconnected and communicating devices puts increasing demands on cybersecurity operators and their tools. With the rise of end-to-end encryption, it is becoming increasingly difficult to detect threats in network traffic. With such motivation, this Ph.D. proposal aims to find new methods for automatic detection of threats hiding in encrypted channels. The focus of the proposal is on correlating the data still available in the encrypted network flows with the data contained in the logs of network applications. Our research is in the initial phase and will contribute to a Ph.D. thesis in four years.
ER -
ŠPAČEK, Stanislav a Pavel ČELEDA. Threat Detection Through Correlation of Network Flows and Logs. Online. In \textit{Proceedings of the 12th International Conference on Autonomous Infrastructure, Management and Security (AIMS 2018)}. Neuveden: IFIP, 2018, s.~6-10. ISBN~978-3-903176-12-6.
|
