FIELDS : Flow Intrusion Extrusion Largescale Detection System - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2012

FIELDS : Flow Intrusion Extrusion Largescale Detection System

Abstract

This paper presents an advanced pre-processing, called FIELDS, for analyzing the network traffic based on flow assessments. FIELDS is an extensible Network Security Monitoring that supports 1) advanced traffic pre-processing, 2) forensics and 3) existing Network Extrusion/Intrusion Detection Systems. FIELDS has been experimented during two months using a large real network thanks to its non intrusive nature. The results show the efficiency of different heuristics for pre-processing the traffic relevant of an intrusion. FIELDS provides an unified and efficient tool for pre-processing the network traffic and detecting/controlling the potential internal/external intruders. FIELDS solves the problem of scalability for the monitoring of the security of large networks. It can be easily extended to integrate other heuristics and correlate the different analysis.
No file

Dates and versions

hal-00771333 , version 1 (08-01-2013)

Identifiers

  • HAL Id : hal-00771333 , version 1

Cite

Jérémy Briffaut, Nicolas Grenèche, Quentin Narvor, Christian Toinard. FIELDS : Flow Intrusion Extrusion Largescale Detection System. The Sixth International Conference on Emerging Security Information, Systems and Technologies, Aug 2012, Rome, Italy. ⟨hal-00771333⟩
167 View
0 Download

Share

Gmail Facebook X LinkedIn More