CERT
flocon

FloCon

FloCon is an open workshop that provides a forum for operational analysts, researchers, tool developers, and other parties interested in the security analysis of large volumes of traffic to develop the next generation of flow-based analysis. Flow is an abstraction of network traffic in which packets are grouped together by common attributes over time. In security, flow has been used to survey and analyze large networks and long periods of time, as well as provide a retrospective view of network activity for incident handling. Presentation submissions are highly encouraged, but not required, to attend the conference. Questions and comments can be directed to flocontact@cert.org.

Conference Information

FloCon 2009
January 12-15, 2009, Scottsdale, AZ
DoubleTree Paradise Valley Resort

Abstract Submission Details
Submission Deadline: Midnight, Friday October 24, 2008 EDT
Please submit your abstract using the conference management website. All presentation materials should be publicly releasable—FOUO or CUI information should not be included.

Presentations reflecting experience and practical issues are especially welcomed. Topics appropriate for presentation to this workshop include, but are not limited to the following:

  • Flow for network forensics
  • Flow for network inventory
  • visualizations of Flow and analytical results
  • multi-stage analysis methods
  • Flow collection infrastructure including
    • smart/customized collection
    • distributed Flow collection and analysis
    • Communication/cooperation between analysis components
  • Using Flow in incident response
  • merging Flow with other data sources
  • Flow for IPv6
  • Flow for information security
  • coordination among Flow analysis teams
  • threat analysis
  • new or innovative Flow methods
  • Flow correlation techniques
  • advanced traffic flow data bases
  • application detection
  • topology mapping

Notification of Acceptance: Friday, November 7, 2008

Final presentations are due Midnight, December 5, 2008 Eastern Standard Time. Accepted presentations will be presented by their author(s) at FloCon 2009 and will be published and archived in the proceedings on the FloCon website.

Questions and comments can be directed to flocontact@cert.org.

Conference

FloCon 2009
Conference Information

FloCon 2008
Proceedings

FloCon 2006
Proceedings

FloCon 2005
Proceedings

FloCon 2004
Proceedings


Community

FloCommunity Email List
Last updated October 1, 2008