Statistical Model Applied to NetFlow for Network Intrusion Detection
Nenhuma Miniatura disponível
Data
2010-01-01
Título da Revista
ISSN da Revista
Título de Volume
Editor
Springer
Resumo
The computers and network services became presence guaranteed in several places. These characteristics resulted in the growth of illicit events and therefore the computers and networks security has become an essential point in any computing environment. Many methodologies were created to identify these events; however, with increasing of users and services on the Internet, many difficulties are found in trying to monitor a large network environment. This paper proposes a methodology for events detection in large-scale networks. The proposal approaches the anomaly detection using the NetFlow protocol, statistical methods and monitoring the environment in a best time for the application.
Descrição
Palavras-chave
Security, network, statistical, NetFlow, intrusion detection, anomaly
Como citar
Transactions on Computational Science Xi: Special Issue on Security in Computing, Part Ii. Berlin: Springer-verlag Berlin, v. 6480, p. 179-191, 2010.