Publication

A scalable, real-time packet capturing solution

View document

Bibliographic Details
Summary:The evolution of technology and the increasing connectivity between devices lead to an increased risk of cyberattacks. Good protection systems, such as Intrusion Detection System (IDS) and Intrusion Prevention System (IPS), are essential in trying to prevent, detect and counter most of the attacks. However, the increasing creativity and type of attacks raise the need for more resources and processing power for the protection systems which, in turn, requires horizontal scalability to keep up with the massive companies’ network infrastructure and with the complexity of attacks. Technologies like machine learning, show promising results and can be of added value in the detection and prevention of attacks in real-time. But good algorithms and tools are not enough. They require reliable and solid datasets to be able to effectively train the protection systems. The development of a good dataset requires horizontalscalable, robust, modular and fault-tolerance systems, so that the analyses may be done also in real-time. This paper describes an architecture for horizontal-scaling capture architecture, able to collect packets from multiple sources and prepared for real-time analysis. It depends on multiple modular nodes with specific roles to support different algorithms and tools.
Main Authors:Oliveira, Rafael Cardoso de
Other Authors:Almeida, João P.; Praça, Isabel; Lopes, Rui Pedro; Pedrosa, Tiago
Subject:Packet capture Packet storage Distributed system Machine learning
Year:2021
Country:Portugal
Document type:conference paper
Access type:restricted access
Associated institution:Instituto Politécnico de Bragança
Language:English
Origin:Biblioteca Digital do IPB

Similar Items

Similar Items