Publication result detail

Portscan detection using NetFlow data

GRÉGR, M.

Original Title

Portscan detection using NetFlow data

English Title

Portscan detection using NetFlow data

Type

Paper in proceedings outside WoS and Scopus

Original Abstract

Portscan detection methods are usually focused on enterprise networks where the traffic volume is low. Portscan detection on high speed backbone networks has however different requirements. This paper introduces a method for detection of portscans on a university backbone
network using NetFlow data, collected by hardware accelerated NetFlow probes.

English abstract

Portscan detection methods are usually focused on enterprise networks where the traffic volume is low. Portscan detection on high speed backbone networks has however different requirements. This paper introduces a method for detection of portscans on a university backbone
network using NetFlow data, collected by hardware accelerated NetFlow probes.

Keywords

NetFlow, port scan detection, security, decision tree

Key words in English

NetFlow, port scan detection, security, decision tree

Authors

GRÉGR, M.

RIV year

2011

Released

22.09.2010

Publisher

Faculty of Information Technology BUT

Location

Brno

ISBN

978-80-214-4080-7

Book

Proceedings of the 16th Conference Student EEICT 2010 Volume 5

Pages from

229

Pages to

233

Pages count

5

URL

http://www.feec.vutbr.cz/EEICT/2010/sbornik/03-Doktorske_projekty/09-Pocitacove_systemy/02-xgregr01.pdf

BibTex

@inproceedings{BUT36308,
  author="Matěj {Grégr}",
  title="Portscan detection using NetFlow data",
  booktitle="Proceedings of the 16th Conference Student EEICT 2010 Volume 5",
  year="2010",
  pages="229--233",
  publisher="Faculty of Information Technology BUT",
  address="Brno",
  isbn="978-80-214-4080-7",
  url="http://www.feec.vutbr.cz/EEICT/2010/sbornik/03-Doktorske_projekty/09-Pocitacove_systemy/02-xgregr01.pdf"
}