Systém pro odhalování vztahů mezi datovými toky (NetFlow/IPFIX)

A system for discovering relationships between network flows (NetFlow/IPFIX)

software

In order to use the result by another entity, it is always necessary to acquire a license

The licensor requires a license fee for the result

Ryšavý Ondřej, doc. Ing., Ph.D. (DIFS)
Holkovič Martin, Ing., Ph.D.
Matoušek Petr, doc. Ing., Ph.D., M.A. (DIFS)
Minařík Pavel, RNDr., Ph.D. (FIT)
Šnupárek Aleš
Střítežský Jan

network monitoring, correlation analysis, netflow, IPFIX, network traffic analysis 

The result is software that analyzes data streams and identifies relationships between them. The relationships found in this way will make it possible to find out additional information about the encrypted flows, which would not be possible to find by analyzing only the encrypted connections. Newly derived information about encrypted streams will increase visibility into network traffic for network administrators and enrich encrypted connections with additional context to identify their characteristics (eg, destination domain, purpose). The result will be integrated into the Flowmon products. The Flowmon collector processes information in the form of network flows from various locations in the network, which it provides to network administrators for visualization, analysis and reporting.

V privátním repozitáři projektu.

Context-based Encrypted Traffic Analysis Using Flow Data, TAČR, 3. veřejná soutěž - Program průmyslového výzkumu a experimentálního vývoje TREND, PODPROGRAM 1 – TECHNOLOGIČTÍ LÍDŘI, FW03010099, 2021-2023, running

NES@FIT - Networks and distributed systems research group (RG NES@FIT)

Department of Information Systems (DIFS)