An Interactive Security Analysis System of Large Scale NetFlow Data
Date Issued
2015
Date
2015
Author(s)
Zhou, Zhen-Hou
Abstract
As the network volume grows rapidly, network crimes can hide behind the huge network traffic. In order to let IT security people find evidences fastly and effectively from such a huge network traffic, we proposed a interactive, visualable network query system-NetActy. In this thesis, we improve the interactivity and visualization process, by takeing the balance between workload and data locality into consider. We formulate the job assignment problem into a Linear Programming problem and solve it by a heuristic solution-Algorithm 1. In the last, we evaluate the performance of Algorithm 1 and make sure that Algorithm 1 can actually balance the workload without violating data locality. Besides, we solve the problem encountered in visualization part by applying current OS’s solution.
Subjects
Network security forensics
Interactive query system
Big data
Job assignment
Data locality
NetFlow records visualization
SDGs
Type
thesis
File(s)![Thumbnail Image]()
Loading...
Name
ntu-104-R02725012-1.pdf
Size
23.32 KB
Format
Adobe PDF
Checksum
(MD5):567c1a1875d28bc79c00f222ec9da03e
