Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Presentation

Discrete Mathematical Approaches to Traffic Graph Analysis

  • Watch

    Loading the video......
  • Abstract

    In this presentation, the authors describe

    • A basic characterization of the formal structure of NetFlow multigraphs, both at the detailed IP:Port level and their scalar projections to subgraphs involving only IPs and ports
    • A description of the VAST 2013 cyber challenge test data″ Some analytical results using basic NetFlow graph statistics
    • A characterization of IP interaction during simulated attacks using a simple, but novel, theoretical measure of the labeled degree distribution of the flow nodes

    Another characterization of the temporal characteristics of flows in attacks, using the mathematical order relationships of flow time intervals, and interval arithmetic to measure their separationsThese analytic methods are in the process of being deployed on operational data. But even against test data, in addition to highlighting the potential significance against real data, they reveal aspects and even artifacts of the simulation itself, indicating the promise for this approach.

  • Download

Part of a Collection

FloCon 2015 Collection