Systém pro odhalování vztahů mezi datovými toky (NetFlow/IPFIX)

A system for discovering relationships between network flows (NetFlow/IPFIX)

software

required - licence fee

Ryšavý Ondřej, doc. Ing., Ph.D. (DIFS FIT BUT)
Holkovič Martin, Ing. (Flowmon)
Matoušek Petr, doc. Ing., Ph.D., M.A. (DIFS FIT BUT)
Minařík Pavel, RNDr., Ph.D. (Flowmon)
Aleš Šnupárek (Flowmon)
Jan Střítežský (Flowmon)

network monitoring, correlation analysis, netflow, IPFIX, network traffic analysis 

The result is software that analyzes data streams and identifies relationships between them. The relationships found in this way will make it possible to find out additional information about the encrypted flows, which would not be possible to find by analyzing only the encrypted connections. Newly derived information about encrypted streams will increase visibility into network traffic for network administrators and enrich encrypted connections with additional context to identify their characteristics (eg, destination domain, purpose).

The result will be integrated into the Flowmon products. The Flowmon collector processes information in the form of network flows from various locations in the network, which it provides to network administrators for visualization, analysis and reporting.

In the project's private repository.

Context-based Encrypted Traffic Analysis Using Flow Data (FW03010099)

NES@FIT - Networks and distributed systems research group (VZ NES@FIT)

Department of Information Systems FIT BUT (DIFS FIT BUT)
Flowmon Networks, a.s. (Flowmon)