Flexible flow aggregation for adaptive network monitoring

Proceedings - Conference on Local Computer Networks, LCN

Volumn , Issue , 2006, Pages 702-709

  Dressler, Falko ^a   Münz, Gerhard ^b  

^a UNIVERSITY OF ERLANGEN NUREMBERG   (Germany)

^b UNIVERSITY OF TÜBINGEN   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; CONCENTRATION (PROCESS); DATA STORAGE EQUIPMENT; HIGH SPEED NETWORKS; INTERNET; MECHANISMS; MONITORING; NETWORK SECURITY; TELECOMMUNICATION NETWORKS;

ADAPTIVE NETWORKS; AGGREGATED FLOWS; AGGREGATION MECHANISM; ANOMALY DETECTIONS; BUILDING BLOCKS; CHARGING (MATERIALS); COMMUNICATION NETWORKS; DISTRIBUTED DENIAL-OF-SERVICE (DDOS) ATTACKS; FLEXIBLE FLOW; FLOW DATA; GROWING NETWORK; HIGH-SPEED NETWORKS; IN ORDER; LOCAL COMPUTER; MONITORING DATA; NETWORK MONITORING; NETWORK SECURITY SOLUTIONS; NEXT GENERATION NETWORKS (NGN); ON FLOW; PACKET INFORMATION; VERMONT;

COMPUTER NETWORKS;

EID: 34447306223     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/LCN.2006.322180     Document Type: Conference Paper

References (20)

1. K. G. Anagnostakis, S. Ioannidis, S. Miltchev, J. Ioannidis, M. Greenwald, and J. M. Smith. Efficient Packet Monitoring for Network Management. In 8th IEEE Network Operations and Management Symposium (NOMS), Florence, Italy, Apr. 2002.
2. B. Claise. Cisco Systems NetFlow Services Export Version 9. RFC 3954, Oct. 2004.
3. B. Claise. IPFIX Protocol Specification. Internet-Draft, work in progress, draft-ietf-ipfix-protocol-22.txt, June 2006.
4. L. Deri. nProbe: an Open Source NetFlow Probe for Gigabit Networks. In TERENA Networking Conference (TNC 2003), Zagreb, Croatia, May 2003.
5. F. Dressier, C. Sommer, and G. Münz. IPFIX Aggregation. Internet-Draft, work in progress, draft-dressler-ipfixaggregation-03.txt, June 2006.
6. B. Fortz, J. Rexford, and M. Thorup. Traffic Engineering with Traditional IP Routing Protocols. IEEE Communications Magazine, 40(10):118-124, Oct. 2002.
7. F. Ghys and A. Vaaraniemi. Component-Based Charging in a Next-generation Multimedia Network. IEEE Communications Magazine, 41(1):99-102, Jan. 2003.
8. N. Hohn and D. Veitch. Inverting sampled traffic. In 3rd ACM SIGCOMM Conference on Internet Measurement, pages 222-233, Miami Beach, FL, USA, Oct. 2003.
9. Y. Hu, D.-M. Chiu, and J. C. Lui. Adaptive Flow Aggregation - A New Solution for Robust Flow Monitoring under Security Attacks. In IEEE/IFIP Network Operations and Management Symposium (IEEE/IFIP NOMS 2006), pages 424-435, Vancouver, Canada, Apr. 2006.
10. R. Kemmerer and G. Vigna. Intrusion Detection: A Brief History and Overview. IEEE Computer - Special Issue on Security and Privacy, pages 27-30, Apr. 2002.
11. R. T. Lampert, C. Sommer, G. Münz, and F. Dressler. Vermont - A Versatile Monitoring Toolkit for IPFIX and PSAMP. In IEEE/IST Workshop on Monitoring, Attack Detection and Mitigation (MonAM 2006), Tuebingen, Germany, Sept. 2006.
12. T.-H. Lee, W.-K. Wu, and T.-Y. W. Huang. Scalable Packet Digesting Schemes for IP Traceback. In IEEE International Conference on Communications, Paris, France, June 2004.
13. J.Li, M. Sung, J. Xu, and L. Li. Large-Scale IP Traceback in High-Speed Internet: Practical Techniques and Theoretical Foundation. In IEEE Symposium on Security and Privacy, Berkeley, CA, USA, May 2004.
14. J. Mirkovic and P. Reiher. A Taxonomy of DDoS Attack and DDoS Defense Mechanisms. ACM SIGCOMM Computer Communication Review, 34(2):39-53, Apr. 2004.
15. J. Quittek, S. Bryant, B. Claise, and J. Meyer. Information Model for IP Flow Information Export. Internet-Draft, work in progress, draft-ietf-ipfix- info-12.txt, June 2006.
16. J. Quittek, T. Zseby, B. Claise, and S. Zander. Requirements for IP Flow Information Export (IPFIX). RFC 3917, Oct. 2004.
17. G. Sadasivan, N. Brownlee, B. Claise, and J. Quittek. Architecture for IP Flow Information Export. Internet-Draft, work in progress, draft-ietf-ipfix- architecture-11.txt, June 2006.
18. C. Schmoll, J. Quittek, S. Tartarelli, S. Niccolini, T. Dietz, A. Bulanza, and E. Boschi. MOME Interoperability Testing Event. Deliverable d13 of ist mome, Aug. 2005.
19. C. Schmoll and S. Zander. NetMate - User and Developer Manual. Technical report, Feb. 2004.
20. H. Wang, D. Zhang, and K. G. Shin. SYN-dog: Sniffing SYN Flooding Sources. In 22nd International Conference on Distributed Computing Systems (ICDCS'02), Vienna, Austria, July 2002.