Systém pro odhalování vztahů mezi datovými toky (NetFlow/IPFIX)

A system for discovering relationships between network flows (NetFlow/IPFIX)

software

In order to use the result by another entity, it is always necessary to acquire a license

The licensor requires a license fee for the result

Ryšavý Ondřej, doc. Ing., Ph.D. (DIFS)
Holkovič Martin, Ing., Ph.D.
Matoušek Petr, doc. Ing., Ph.D., M.A. (DIFS)
Minařík Pavel, RNDr., Ph.D.
Šnupárek Aleš
Střítežský Jan

network monitoring, correlation analysis, netflow, IPFIX, network traffic
analysis 

The result is software that analyzes data streams and identifies relationships
between them. The relationships found in this way will make it possible to find
out additional information about the encrypted flows, which would not be possible
to find by analyzing only the encrypted connections. Newly derived information
about encrypted streams will increase visibility into network traffic for network
administrators and enrich encrypted connections with additional context to
identify their characteristics (eg, destination domain, purpose).

The result will be integrated into the Flowmon products. The Flowmon collector
processes information in the form of network flows from various locations in the
network, which it provides to network administrators for visualization, analysis
and reporting.

V privátním repozitáři projektu.

• zip ethanol-main.zip 39 MB

Context-based Encrypted Traffic Analysis Using Flow Data, TAČR, 3. veřejná soutěž - Program průmyslového výzkumu a experimentálního vývoje TREND, PODPROGRAM 1 – TECHNOLOGIČTÍ LÍDŘI, FW03010099, start: 2021-01-01, end: 2023-12-31, running

NES@FIT - Networks and distributed systems research group (RG NES@FIT)

Department of Information Systems (DIFS)