Improving Analytics Using Enriched Network Flow Data

Software Engineering Institute (SEI) Webcast Series

内容由Carnegie Mellon University Software Engineering Institute and SEI Members of Technical Staff提供。所有播客内容（包括剧集、图形和播客描述）均由 Carnegie Mellon University Software Engineering Institute and SEI Members of Technical Staff 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

2+ y ago 1:02:25

MP4•单集首页

Classic tool suites that are used to process network flow records deal with very limited detail on the network connections they summarize. These tools limit detail for several reasons: (1) to maintain long-baseline data, (2) to focus on security-indicative data fields, and (3) to support data collection across large or complex infrastructures. However, a consequence of this limited detail is that analysis results based on this data provide information about indications of behavior rather than information that accurately identifies behavior with high confidence. In this webcast, Tim Shimeall and Katherine Prevost discuss how to use IPFIX-formatted data with detail derived from deep packet inspection (DPI) to provide increased confidence in identifying behavior.

174集单集