Detail publikace

Portscan detection using NetFlow data

GRÉGR, M.

Originální název

Portscan detection using NetFlow data

Typ

článek ve sborníku mimo WoS a Scopus

Jazyk

angličtina

Originální abstrakt

Portscan detection methods are usually focused on enterprise networks where the traffic volume is low. Portscan detection on high speed backbone networks has however different requirements. This paper introduces a method for detection of portscans on a university backbone network using NetFlow data, collected by hardware accelerated NetFlow probes.

Klíčová slova

NetFlow, port scan detection, security, decision tree

Autoři

GRÉGR, M.

Rok RIV

2010

Vydáno

22. 9. 2010

Nakladatel

Faculty of Information Technology BUT

Místo

Brno

ISBN

978-80-214-4080-7

Kniha

Proceedings of the 16th Conference Student EEICT 2010 Volume 5

Strany od

229

Strany do

233

Strany počet

5

URL

http://www.feec.vutbr.cz/EEICT/2010/sbornik/03-Doktorske_projekty/09-Pocitacove_systemy/02-xgregr01.pdf

BibTex

@inproceedings{BUT36308,
  author="Matěj {Grégr}",
  title="Portscan detection using NetFlow data",
  booktitle="Proceedings of the 16th Conference Student EEICT 2010 Volume 5",
  year="2010",
  pages="229--233",
  publisher="Faculty of Information Technology BUT",
  address="Brno",
  isbn="978-80-214-4080-7",
  url="http://www.feec.vutbr.cz/EEICT/2010/sbornik/03-Doktorske_projekty/09-Pocitacove_systemy/02-xgregr01.pdf"
}