Journal of Network and Computer Applications · 2018 · 127 citations · 50 references
ComputingCybersecurityInformation TechnologyComputer SecurityNetwork SecuritySecurity ArchitectureComputer IntrusionData CollectionIntrusion DetectionNetwork Traffic AnalysisHeterogeneous NetworksNetwork Intrusion DetectionNetwork MeasurementNetwork Monitoring ArchitectureNetwork Security MonitoringReal-time MonitoringSecurity MeasurementTraffic Control
Networks have dramatically changed our daily life and infiltrated all aspects of human society. At the same time when we enjoy the convenience and benefits brought by the networks, we also suffer from a great amount of intelligent attacks and malicious intrusions. As a fundamental procedure of network security measurement, network data collection executes real time network monitoring, supports network performance evaluation, assists network billing, and helps traffic testing and filtering. Thus, it plays a crucial and essential role for dealing with network intrusion detection and unwanted traffic control. But an adaptive and effective data collection mechanism that can be pervasively applied into heterogeneous networks is still lacked. The literature we have hunted rarely comments and compares the performance of existing data collection mechanisms. In this paper, we conduct a survey on existing data collection methods, mechanisms and architectures. According to a number of proposed assessment criteria, we evaluate the performance of existing data collection mechanisms and summarize their characteristics. Furthermore, we figure out some open issues based our investigation and forecast future research directions.
50
Software-Defined Networking: A Comprehensive Survey
Diego Kreutz, Fernando M. V. Ramos, Paulo Esteves Veríssimo et al. · Proceedings of the IEEE · 2014 · 4.9K citations · Full text
Snort - Lightweight Intrusion Detection for Networks
Martin Roesch · 1999 · 3.1K citations
Models and issues in data stream systems
Brian Babcock, Shivnath Babu, Mayur Datar et al. · 2002 · 2.5K citations
Nate Foster, Rob Harrison, Michael J. Freedman et al. · ACM SIGPLAN Notices · 2011 · 585 citations
An Overview of IP Flow-Based Intrusion Detection
Anna Sperotto, Gregor Schaffrath, Ramin Sadre et al. · IEEE Communications Surveys & Tutorials · 2010 · 459 citations · Full text