Loading in 2 Seconds...
Loading in 2 Seconds...
Network Monitoring and Measurement and its application in security field. Miao Luo, Wei Jiang. Definition. network traffic measurement is the process of measuring the amount and type of traffic on a particular network. This is especially important with regard to effective bandwidth management.
Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.
Miao Luo, Wei Jiang
-Understand the behavior of their networks
-Provide fast, high-quality, reliable service to satisfy customers and thus reduce churn rate
-Plan for network deployment and expansion
-SLA monitoring, Network security
-Usage-based billing for network users (like telephone calls)
-Marketing using CRM data
-Want to get their money’s worth
-Fast, reliable, high-quality, secure, virus-free Internet access
flow recordsThe General Traffic Flow Measurement Process
by applications (TE, attack detect., QoS monitoring, accounting, …)
… other …
High-speed networks (Mbps ? Gbps ? Tbps)
Streaming media (Windows Media, Real Media, Quicktime)
Network Security Attacks
What packet information to save to perform various analysis?
How to minimize storage requirements?
How to analyze and generate data needed quickly?
What kinds of info needs to be generated? -- Depends on applications
Develop a flexible, scalable traffic monitoring and analysis system for high-speed, high-volume, rich media IP networks
-Connectivity (RFC 2687)
-One-Way Delay (RFC 2679)
-One-Way Packet Loss (RFC 2680)
-Round Trip Delay (RFC 2681)
-Bulk transfer capacity
One way loss
One way delay
-Connectivity: the physical connectivity of network elements.
-Functionality: whether the associated system works well or not.
-Round Trip Delay = Forward transport delay + server delay + backward transport delay
-Ping is still the most commonly used to measure latency.
-Generate test packets periodically or on-demand
-Measure performance of test packets or responses
-Take the statistics
-Collect packets from a link or network flow from a router
-Perform analysis on captured packets for various purposes
-Network device performance degrades by mirroring or flow export
-detecting (high volume) traffic patterns
-investigation of origin of attacks
-detecting unexpected or illegal packets