William Yurcik (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)
National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign
Publications by William Yurcik (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)
-
SCRUB NetFlows
January 07, 2008 • Presentation
William Yurcik (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)Clay Woolam (University of Texas at Dallas)Latifur Khan (University of Texas at Dallas)
In this presentation, the authors discuss SCRUB, a tool for multi-field, multi-level netflow anonymization.
read -
VisFlowConnet-IP: An Animated Link Analysis Tool for Visualizing Netflows
September 20, 2005 • White Paper
Xiaoxin Yin (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)William Yurcik (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)Adam Slagell (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)
In this paper, the authors present VisFlowConnect-IP, a network flow visualization tool that allows operators to detect and investigate network traffic.
read -
NVisionIP: An Animated State Analysis Tool for Visualizing NetFlows (Presentation)
September 20, 2005 • Presentation
Ratna Bearavolu (National Center for Supercomputing Applications (NCSA) University of Illinois at Urbana-Champaign)Kiran Lakkaraju (National Center for Supercomputing Applications (NCSA) University of Illinois at Urbana-Champaign)William Yurcik (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)
In this presentation, the authors discuss NVisionIP, a tool designed to increase the security analyst's situational awareness.
read -
CANINE: A NetFlows Converter/Anonymizer Tool for Format Interoperability and Secure Sharing (White Paper)
September 20, 2005 • White Paper
Katherine Luo (National Center for Supercomputing Applications (NCSA) University of Illinois at Urbana-Champaign)Adam Slagell (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)William Yurcik (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)
In this paper, the authors introduce a tool to address two problems with using Net-Flow logs for security analysis.
read -
CANINE: A NetFlows Conversion/Anonymization Tool for Format Interoperability and Secure Sharing (Presentation)
September 20, 2005 • Presentation
Katherine Luo (National Center for Supercomputing Applications (NCSA) University of Illinois at Urbana-Champaign)Adam Slagell (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)William Yurcik (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)
In this presentation, the authors describe CANINE, a converter and anonymizer for investigating netflow events.
read -
VisFlowConnect-IP: An Animated Link Analysis Tool For Visualizing Netflows (Presentation)
September 20, 2005 • Presentation
Xiaoxin Yin (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)William Yurcik (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)Adam Slagell (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)
In this presentation, the authors present VisFlowConnect-IP, a network flow visualization tool that detects and investigates anomalous network traffic.
read -
Sharing Intelligence Is Our Best Defense: Incentives That Work versus Disincentives That Can Be Solved
July 22, 2004 • Presentation
William Yurcik (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)Adam Slagell (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)Jun Wang (National Center for Supercomputing Applications (NCSA) University of Illinois at Urbana-Champaign)
In this presentation, the authors describe the use of ISACs to gather, analyze, and share data to combat cybersecurity problems.
read -
Security at Line Speed with NetFlows
July 22, 2004 • Presentation
William Yurcik (National Center for Supercomputing Applications (NCSA) at University of Illinois at Urbana-Champaign)
In this presentation, William Yurcik discusses netflows, instrumentation issues, the data management problem, and NCSA's netflows architecture.
read