arrow
Return

Toward Stream-Based IP Flow Analysis

delete2017-01-01
delete20
delete
OA
AI
T
Tomáš Jirsík *
M
Milan Čermák
D
Daniel Tovarňák
P
Pavel Čeleda
DOI:10.1109/MCOM.2017.1600972delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
Analyzing IP flows is an essential part of traffic measurement for cyber security. Based on information from IP flows, it is possible to discover the majority of concurrent cyber threats in highspeed, large-scale networks. Some major prevailing challenges for IP flow analysis include, but are not limited to, analysis over a large volume of IP flows, scalability issues, and detecting cyber threats in real time. In this article, we discuss the transformation of present IP flow analysis into a stream-based approach to face current challenges in IP flow analysis. We examine the possible positive and negative impacts of the transformation and present examples of real-world applications, along with our recommendations. Our ongoing results show that stream-based IP flow analysis successfully meets the above-mentioned challenges and is suitable for achieving real-time network security analysis and situational awareness.
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Communications Magazine cover
IEEE Communications Magazine
IF:
8.2
Papers:
6.9K
Citations:
2.2W

Organization

M
masaryk university brno
Scholars:
1.1W
Papers: 7.8K
Citations: 9
Cited Papers

Cited Papers

TRANSVAC research infrastructure – Results and lessons learned from the European network of vaccine research and development
err2015-10-01
err0
PREAI
errMark J. Geels; Regitze L. Thøgersen; Carlos A. Guzman; Mei Mei Ho; Frank Verreck; Nicolas Collin; James S. Robertson; Samuel J. McConkey; Stefan H.E. Kaufmann; Odile Leroy
errShare
errSave
Potential business model for a European vaccine R&D infrastructure and its estimated socio-economic impact
err2023-10-24
err0
errOAAI
errStefan Jungbluth; William Martin; Monika Slezak; Hilde Depraetere; Carlos A. Guzman; Anton Ussi; David Morrow; Fran Van Heuverswyn; Sven Arnouts; Manuel J. T. Carrondo; Ole Olesen; Tom H.M. Ottenhoff; H. M. Dockrell; Mei Mei Ho; Alexandre Dobly; Dennis Christensen; Joaquim Segalés; Fabrice Laurent; Frédéric Lantier; Norbert Stockhofe-Zurwieden; Francesca Morelli; Jan A.M. Langermans; Frank A.W. Verreck; Roger Le Grand; Arjen Sloots; Donata Medaglini; Maria Lawrenz; Nicolas Collin
errShare
errSave
errShare
errSave
Flow Monitoring Explained: From Packet Capture to Data Analysis With NetFlow and IPFIX
err2014-01-01
err338
errOAAI
errHofstede, Rick; Celeda, Pavel; Trammell, Brian; Drago, Idilio; Sadre, Ramin; Sperotto, Anna; Pras, Aiko
errShare
errSave
An Overview of IP Flow-Based Intrusion Detection
err2010-01-01
err295
errOAAI
errSperotto, Anna; Schaffrath, Gregor; Sadre, Ramin; Morariu, Cristian; Pras, Aiko; Stiller, Burkhard
errShare
errSave
Treatment and management of cluster headache
err2001-02-01
err0
PREAI
errDavid W. Dodick; David J. Capobianco
errShare
errSave
Mapreduce: Simplified data processing on large clusters
err2008-01-01
err3.0K
errOAAI
errDean, Jeffrey; Ghemawat, Sanjay
errShare
errSave
no more