CERT


FloCon 2006 Proceedings

Below you will find proceedings from FloCon 2006 near Portland, OR (in Vancouver, WA). They are in PDF format.

Papers


Elisa Boschi, Brian Trammell
Bidirectional Flow Measurement, IPFIX, and Security Analysis

Raj Srinivasan
System Requirements for Flow Processing

Ron McLeod
A Traffic Analysis of a Small Private Network Compromised by an On-line Gaming Host

Phil Groce, John Prevost
RAVE : The Retrospective Analysis and Visualization Engine

David Moore
Anomaly Sampling

Ron McLeod, Vagishwari Nagaonkar
Anomaly Detection Through Blind Flow Analysis Inside a Local Network

Daniela Brauckhoff, Bernhard Tellenbach, Arno Wagner, Anukool Lakhina, Martin May
The Effect of Packet Sampling on Anomaly Detection

Abhishek Kumar, Sapan Bhatia
Scalable Flow Analysis

James R. Binkley
Anomaly-based Botnet Server Detection

Josh Goldfarb
Identifying Anomalous Network Traffic Through the Use of Client Port Distribution

Annarita Giani, Ian Gregorio De Souza, Vincent Berk, George Cybenko
Attribution and Aggregation of Network Flows for Security Analysis

Tanja Zseby, Elisa Boschi, Thomas Hirsch, Lutz Mark
IPFIX/PSAMP: What Future Standards Can Offer to Network Security



Presentations


Elisa Boschi, Brian Trammell
Bidirectional Flow Measurement, IPFIX, and Security Analysis

Raj Srinivasan
A System Architecture for Processing Flows

Ron McLeod
A Traffic Analysis of a Small Private Network Compromised by an On-line Gaming Host

David Moore
Anomaly Sampling (bringing diversity to network security)

Ron McLeod, Vagishwari Nagaonkar
Anomaly Detection Through Blind Flow Analysis Inside a Local Network

Daniela Brauckhoff, Bernhard Tellenbach, Arno Wagner, Anukool Lakhina, Martin May
Impact of Packet Sampling on Anomaly Detection Metrics

Abhishek Kumar, Sapan Bhatia
Scalable Flow Analysis

James R. Binkley
Anomaly-based BotServer (and more!) Detection

Annarita Giani, Ian De Souza, Vincent Berk, George Cybenko
Attribution and Aggregation of Network Flows for Security Analysis

Tanja Zseby, Elisa Boschi, Thomas Hirsch, Lutz Mark
IPFIX/PSAMP: What Future Standards Can Offer to Network Security

John McHugh
The Past and Future of Flow Analysis

Tanja Zseby
A Case for Packet Sampling

Tim Shimeall
Analysis Methods Discussion


Last updated November 20, 2006