More netflow tools: For performance and security

LISA 2004 - 18th Large Installation System Administration Conference

Volumn , Issue , 2004, Pages 121-131

  Gates, Carrie ^a   Collins, Michael ^a   Duggan, Michael ^a   Kompanek, Andrew ^a   Thomas, Mark ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SECURITY SYSTEMS;

DATA FILTER; FLOW LEVEL; LARGE NETWORKS; NETWORK CHARACTERISTICS; NETWORK TRAFFIC; PRIMARY DESIGN; SECURITY ANALYSIS; TOOLSETS;

NETWORK SECURITY;

EID: 77953296690     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (13)

1. CAIDA, cflowd: Traffic Flow Analysis Tool, http:// www.caida.org/tools/measurement/cflowd, 2004.
2. Collins, Michael and Michael Reiter, "An empirical analysis of target-resident DoS filters, " Proceedings of the 2004 IEEE Symposium on Security and Privacy, pages 103-114, May 9-12, 2004.
3. Fullmer, Mark and Steve Romig, "The OSU flow-tools package and Cisco Netflow logs, " Proceedings of the 14th Systems Administration Conference (LISA 2000), pages 291-303, Usenix Organization, December 3-8, 2000.
4. Internet Assigned Numbers Authority (IANA), Protocol numbers, http://www.iana.org/ assignments/protocol-numbers, 2004.
5. Kompanek, Drew and Mark Thomas, SiLK Analysis Suite, http://sourceforge.net/projects/ silktools/, 2003.
6. McHugh, John, "Sets, Bags and Rock and Roll, " Proceedings of the Ninth European Symposium on Research in Computer Security, September 13-15, 2004.
7. "The Honeynet Project, " Know Your Enemy, Addison-Wesley, 2002.
8. QoSient, LLC, Argus: Network Audit Record Generation and Utilization System, http://www. qosient.com/argus/, 2004.
9. Symantec, W32.Korgo.F, http://securityresponse. symantec.com/avcenter/venc/data/w32.korgo.f. html, 2004.
10. Symantec, W32.Sasser.B.Worm, http://security response.symantec.com/avcenter/venc/data/w32. sasser.b.worm.html, 2004.
11. Cisco Systems, Cisco CNS NetFlow Collection Engine, http://www.cisco.com/en/US/products/sw/ netmgtsw/ps1964/products_user_guide_chapter 09186a00801ed569.html, 2004.
12. Treachery Unlimited, Port Lookup Search Results, http://www.treachery.net/tools/ports/lookup.cgi, 2004.
13. Williamson, Matthew M., "Throttling Viruses: Restricting Propagation to Defeat Malicious Mobile Code, " 18th Annual Computer Security Applications Conference, December 9-13, 2002.