Flow-based Network Protection as an Integral Part of an Early Warning System

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14610%2F11%3A00065696" target="_blank" >RIV/00216224:14610/11:00065696 - isvavai.cz</a>

Result on the web

<a href="http://www.muni.cz/research/projects/4622/web/files/network-protection.pdf" target="_blank" >http://www.muni.cz/research/projects/4622/web/files/network-protection.pdf</a>

DOI - Digital Object Identifier

—

Result language

angličtina

Original language name

Flow-based Network Protection as an Integral Part of an Early Warning System

Original language description

This presentation introduces flow-based network protection and its application in mitigation of brute-force attack on authentication. First, a flow monitoring infrastructure of Masaryk University, Brno and developed methods of flow data analysis are described. These methods are then demonstrated on detection of the Chuck Norris botnet. Next, we present the goals and architecture of the network protection. Finally, we outline the integration of this concept with early warning systems.

Czech name

—

Czech description

—

Type

A - Audiovisual production

CEP classification

IN - Informatics

OECD FORD branch

—

Project

<a href="/en/project/OVMASUN200801" target="_blank" >OVMASUN200801: Security of Czech army information and communication systems - On-line monitoring, Visualization and Packet Filtration. Computer Incident Response Capability Development in the Cyber Defence Environment.</a><br>

Continuities

P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year

2011

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

ISBN

—

Place of publication

—

Publisher/client name

—

Version

—

Carrier ID

—