NetStore: An efficient storage infrastructure for network forensics and monitoring

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6307 LNCS, Issue , 2010, Pages 277-296

  Giura, Paul ^a   Memon, Nasir ^a  

^a POLYTECHNIC UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER FORENSICS; DIGITAL STORAGE; INTRUSION DETECTION; NETWORK SECURITY; QUERY PROCESSING; RELATIONAL DATABASE SYSTEMS; SEARCH ENGINES; SEMANTICS;

ACCESS PATTERNS; COLUMN-ORIENTED; COORDINATED ATTACK; PROTOTYPE IMPLEMENTATIONS; QUERY PERFORMANCE; RELATIONAL DATABASE MANAGEMENT SYSTEMS; SECURITY MONITORING; STORAGE INFRASTRUCTURE;

INFORMATION MANAGEMENT;

EID: 78249262074     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-15512-3_15     Document Type: Conference Paper

References (21)

1. Abadi, D., Madden, S., Ferreira, M.: Integrating compression and execution in column-oriented database systems. In: SIGMOD 2006: Proceedings of the 2006 ACM SIGMOD International Conference on Management of Data, pp. 671-682. ACM, New York (2006)
2. Abadi, D.J., Madden, S.R., Hachem, N.: Column-stores vs. row-stores: how different are they really? In: SIGMOD 2008: Proceedings of the 2008 ACM SIGMOD International Conference on Management of Data, pp. 967-980. ACM, New York (2008)
3. Chang, F., Dean, J., Ghemawat, S., Hsieh, W.C., Wallach, D.A., Burrows, M., Chandra, T., Fikes, A., Gruber, R.E.: Bigtable: A distributed storage system for structured data. In: Proceedings of the 7th USENIX Symposium on Operating Systems Design and Implementation, OSDI 2006 (2006)
4. Cranor, C., Johnson, T., Spataschek, O., Shkapenyuk, V.: Gigascope: a stream database for network applications. In: SIGMOD 2003: Proceedings of the 2003 ACM SIGMOD International Conference on Management of Data, pp. 647-651. ACM, New York (2003)
5. Gates, C., Collins, M., Duggan, M., Kompanek, A., Thomas, M.: More netflow tools for performance and security. In: LISA 2004: Proceedings of the 18th USENIX Conference on System Administration, pp. 121-132. USENIX Association, Berkeley (2004)
6. Geambasu, R., Bragin, T., Jung, J., Balazinska, M.: On-demand view materialization and indexing for network forensic analysis. In: NETB 2007: Proceedings of the 3rd USENIX International Workshop on Networking Meets Databases, pp. 1-7. USENIX Association, Berkeley (2007)
7. Goldstein, J., Ramakrishnan, R., Shaft, U.: Compressing relations and indexes. In: Proceedings of IEEE International Conference on Data Engineering, pp. 370-379 (1998)
8. Halverson, A., Beckmann, J.L., Naughton, J.F., Dewitt, D.J.: A comparison of cstore and row-store in a common framework. Technical Report TR1570, University of Wisconsin-Madison (2006)
9. Holloway, A.L., DeWitt, D.J.: Read-optimized databases, in depth. Proc. VLDB Endow. 1(1), 502-513 (2008)
10. Infobright Inc. Infobright, http://www.infobright.com
11. LucidEra. Luciddb, http://www.luciddb.org
12. Paxson, V.: Bro: A system for detecting network intruders in real-time. Computer Networks, 2435-2463 (1998)
13. PostgreSQL. Postgresql, http://www.postgresql.org
14. Roesch, M.: Snort - lightweight intrusion detection for networks. In: LISA 1999: Proceedings of the 13th USENIX Conference on System Administration, pp. 229- 238. USENIX Association, Berkeley (1999)
15. Ślȩzak, D., Wróblewski, J., Eastwood, V., Synak, P.: Brighthouse: an analytic data warehouse for ad-hoc queries. Proc. VLDB Endow. 1(2), 1337-1345 (2008)
16. Stonebraker, M., Abadi, D.J., Batkin, A., Chen, X., Cherniack, M., Ferreira, M., Lau, E., Lin, A., Madden, S., O'Neil, E., O'Neil, P., Rasin, A., Tran, N., Zdonik, S.: C-store: a column-oriented dbms. In: VLDB 2005: Proceedings of the 31st International Conference on Very Large Data Bases, VLDB Endowment, pp. 553-564 (2005)
17. Sullivan, M., Heybey, A.: Tribeca: A system for managing large databases of network traffic. In: USENIX, pp. 13-24 (1998)
18. Cisco Systems. Cisco ios netflow, http://www.cisco.com
19. Vertica Systems. Vertica, http://www.vertica.com
20. Ziv, J., Lempel, A.: A universal algorithm for sequential data compression. IEEE Transactions on Information Theory 23, 337-343 (1977)
21. Zukowski, M., Boncz, P.A., Nes, N., Héman, S.: Monetdb/x100 - a dbms in the cpu cache. IEEE Data Eng. Bull. 28(2), 17-22 (2005)