A data collection, storage, and analysis framework for network security.

Loading...

View/Download File

Eilertson_Eric October 2007.pdf (655.41 KB)

Persistent link to this item

https://hdl.handle.net/11299/60293

Statistics

View Statistics

Journal Title

Journal ISSN

Volume Title

Title

A data collection, storage, and analysis framework for network security.

Authors

Eilertson, Eric

Published Date

2007-10

Publisher

Type

Thesis or Dissertation

Abstract

As the number, severity and sophistication of computer network attacks increase network administrators have an increasingly difficult time identifying and cleaning up compromised computers. In this thesis some of the areas where existing tools and techniques are deficient are identified, and possible solutions are proposed and evaluated on synthetic as well as real networks. This thesis has four major contributions. The first is a lightweight semi-stateful network data capture module. The second contribution is a framework for storing and accessing raw packet information as well as meta information, such as network sessions. The third contribution is a set of analysis routines for identifying computer network attacks, and computers that have been successfully compromised. The fourth contribution is a framework for iteratively building and analyzing the communication patterns of networked computers. This allows security analysts and researchers to identify compromised computers, as well as perform forensic analysis to answer questions like What computer compromised this computer? When did the compromise occur? How did the compromise happen? What data was stolen or modified?

Keywords

Scan detection

Context extraction

Data mining

Data storage

Network security

Computer Science

Description

University of Minnesota Ph.D. dissertation. October 2007. Major: Computer Science. Advisors: Kumar, Vipin, Zhang, Zhi-li. 1 computer file (PDF); vi, 107 pages.

Related to

Replaces

License

Collections

Dissertations

Series/Report Number

Funding information

Isbn identifier

Doi identifier

Previously Published Citation

Suggested citation

Eilertson, Eric. (2007). A data collection, storage, and analysis framework for network security.. Retrieved from the University Digital Conservancy, https://hdl.handle.net/11299/60293.

Content distributed via the University Digital Conservancy may be subject to additional license and use restrictions applied by the depositor. By using these files, users agree to the Terms of Use. Materials in the UDC may contain content that is disturbing and/or harmful. For more information, please see our statement on harmful content in digital repositories.