Publication detail

Portscan detection using NetFlow data

GRÉGR, M.

Original Title

Portscan detection using NetFlow data

Type

article in a collection out of WoS and Scopus

Language

English

Original Abstract

Portscan detection methods are usually focused on enterprise networks where the traffic volume is low. Portscan detection on high speed backbone networks has however different requirements. This paper introduces a method for detection of portscans on a university backbone network using NetFlow data, collected by hardware accelerated NetFlow probes.

Keywords

NetFlow, port scan detection, security, decision tree

Authors

GRÉGR, M.

RIV year

2010

Released

22. 9. 2010

Publisher

Faculty of Information Technology BUT

Location

Brno

ISBN

978-80-214-4080-7

Book

Proceedings of the 16th Conference Student EEICT 2010 Volume 5

Pages from

229

Pages to

233

Pages count

5

URL

http://www.feec.vutbr.cz/EEICT/2010/sbornik/03-Doktorske_projekty/09-Pocitacove_systemy/02-xgregr01.pdf

BibTex

@inproceedings{BUT36308,
  author="Matěj {Grégr}",
  title="Portscan detection using NetFlow data",
  booktitle="Proceedings of the 16th Conference Student EEICT 2010 Volume 5",
  year="2010",
  pages="229--233",
  publisher="Faculty of Information Technology BUT",
  address="Brno",
  isbn="978-80-214-4080-7",
  url="http://www.feec.vutbr.cz/EEICT/2010/sbornik/03-Doktorske_projekty/09-Pocitacove_systemy/02-xgregr01.pdf"
}