Digital Library

Topics: Network Situational Awareness

In this presentation, given at FloCon 2010, the authors describe DMnet, a distributed botnet detection and mitigation system.

Topics: Network Situational Awareness

In this presentation, the authors describe their current and planned work on FloVis, an extendable framework for network security visualizations.

Topics: Network Situational Awareness

In this presentation, the authors discuss using FloVis to perform network data analysis.

Topics: Network Situational Awareness

In this paper, the authors present VisFlowConnect-IP, a network flow visualization tool that detects and investigates anomalous network traffic.

Topics: Network Situational Awareness

In this 2006 report, the authors present an approach to detecting scans against, or passing through, very large networks.

Topics: Network Situational Awareness

In this presentation, the authors discuss analyzing network data flows using locality, which involves using past observations to predict future behavior.

Topics: Network Situational Awareness

In this presentation, the authors discuss scan detection, scan database, and the analysis of scans.

Topics: Network Situational Awareness

In this paper, the authors present a suite of tools for network traffic collection and analysis based on Cisco NetFlow.

Topics: Network Situational Awareness

In this paper, the authors describe how locality appears in many dimensions and applies to diverse mechanisms.