Using Network Flow Data to Profile Your Network and Reduce Vulnerabilities. Part 1: What a Network Profile Can Tell You About Your Network

reportActive / Technical Report | Accesssion Number: AD1147392 | Open PDF

Abstract:

Today Austin, Sid, and I will be talking about how organizations can use network flow data -- and we'll tell you what that is -- to identify the top public facing assets and services with most network traffic on your network. And the reason this is important is because a potential attacker can observe and take advantage of this information. This conversation is based on an August 2012 report that Austin and Sid authored, which is titled Network Profiling Using Flow.

Author(s):
Allen, Julia ; Whisnant, Austin ; Faber, Sid
Author Organization(s):
CARNEGIE-MELLON UNIV PITTSBURGH PA
Funding Organization(s):
AIR FORCE LIFE CYCLE MANAGEMENT CENTER HANSCOM AFB MA, HANSCOM AFB , MA
Document Type:
Technical Report/Other
Publication Date:
2011 Jan 01
Pagination:
8

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution Code:
A - Approved For Public Release
Distribution Statement: Public Release

RECORD

Collection: TRECMS
Subject Terms
Modernization Areas:
Cyber
Communities of Interest:
Engineered Resilient Systems
Descriptor(s):
data sets, detectors, anomaly detection, change detection, detection, network protocols, software development, computer network security, intellectual property, internet, networks, universities, commerce, mobile devices, monitoring, new mexico, security
Keyword(s):
CERT Network Situational Awareness Team
Subject Categories:
Mathematical and Computer Sciences
Creation Date:
2021 Sep 17
Update Date:
2021 Nov 03