Preserving Relations in Parallel Flow Data Processing - Security of Networks and Services in an All-Connected World Access content directly
Conference Papers Year : 2017

Preserving Relations in Parallel Flow Data Processing

Tomáš Čejka
  • Function : Author
  • PersonId : 1032633
Martin Žádnik
  • Function : Author
  • PersonId : 994069

Abstract

Network monitoring produces high volume of data that must be analyzed ideally in near real-time to support network security operations. It is possible to process the data using Big Data frameworks, however, such approach requires adaptation or complete redesign of processing tools to get the same results. This paper elaborates on a parallel processing based on splitting a stream of flow records. The goal is to create subsets of traffic that contain enough information for parallel anomaly detection. The paper describes a methodology based on so called witnesses that helps to scale up without any need to modify existing algorithms.
Fichier principal
Vignette du fichier
452969_1_En_14_Chapter.pdf (121.23 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01806065 , version 1 (01-06-2018)

Licence

Attribution

Identifiers

Cite

Tomáš Čejka, Martin Žádnik. Preserving Relations in Parallel Flow Data Processing. 11th IFIP International Conference on Autonomous Infrastructure, Management and Security (AIMS), Jul 2017, Zurich, Switzerland. pp.153-156, ⟨10.1007/978-3-319-60774-0_14⟩. ⟨hal-01806065⟩
82 View
80 Download

Altmetric

Share

Gmail Facebook X LinkedIn More