Informace o publikaci

Stream-Based IP Flow Analysis

Logo poskytovatele
Autoři

ČERMÁK Milan ČELEDA Pavel

Rok publikování 2021
Druh Článek ve sborníku
Konference IFIP/IEEE International Symposium on Integrated Network Management, IM 2021
Fakulta / Pracoviště MU

Ústav výpočetní techniky

Citace
www http://dl.ifip.org/db/conf/im/im2021diss/212545.pdf
Klíčová slova Stream Processing; IP Flow; Stream4Flow
Přiložené soubory
Popis As the complexity of Internet services, transmission speed, and data volume increases, current IP flow monitoring and analysis approaches cease to be sufficient, especially within high-speed and large-scale networks. Although IP flows consist only of selected network traffic features, their processing faces high computational demands, analysis delays, and large storage requirements. To address these challenges, we propose to improve the IP flow monitoring workflow by stream-based collection and analysis of IP flows utilizing a distributed data stream processing. This approach requires changing the paradigm of IP flow data monitoring and analysis, which is the main goal of our research. We analyze distributed stream processing systems, for which we design a novel performance benchmark to determine their suitability for stream-based processing of IP flow data. We define a stream-based workflow of IP flow collection and analysis based on the benchmark results, which we also implement as a publicly available and open-source framework Stream4Flow. Furthermore, we propose new analytical methods that leverage the stream-based IP flow data processing approach and extend network monitoring and threat detection capabilities.
Související projekty:

Používáte starou verzi internetového prohlížeče. Doporučujeme aktualizovat Váš prohlížeč na nejnovější verzi.

Další info