Informace o publikaci

Application-Aware Flow Monitoring

Autoři

VELAN Petr ČELEDA Pavel

Druh Článek ve sborníku
Konference IFIP/IEEE International Symposium on Integrated Network Management (IM 2019)
Fakulta / Pracoviště MU

Ústav výpočetní techniky

Citace
WWW http://dl.ifip.org/db/conf/im/im2019diss/190883.pdf
Klíčová slova network; monitoring; measurement; flow; application flow; NetFlow; IPFIX; encryption; performance; 100 Gbps
Přiložené soubory
Popis Network flow monitoring has been a part of network security for the last dozen years. It is constantly evolving to keep pace with changes in network operation and innovative network attacks. The thesis contributes to the continuous efforts by exploring the possibilities unlocked by extending the flow data with application-specific information. We show how the construction of flows is affected by processing of application data, present the benefits to traffic analysis, and assess the inevitable performance loss caused by additional data processing. To compensate for the lost performance, several novel optimisation techniques are proposed for the flow monitoring process. Recognising that the increasing deployment of encryption is going to limit the benefits of application flow monitoring, we perform a survey of methods for measurement of encrypted traffic. The thesis is concluded by an outlook towards future possibilities for flow monitoring advancement.
Související projekty: