סמינר מחלקתי - המחלקה להנדסת תעשייה

Cost efficient network monitoring and filtering

Yuval Elovici

Director to Telekom Innovation Laboratories at BGU

Information Systems Engineering Department

Ben-Gurion University

Abstract:

Malware such as computer viruses, spying programs, Trojans, and distributed denial of service attacks (DDoS) pose a severe risk to any organization connected to the Internet. Distributed Network Intrusion Detection Systems (DNIDS) are considered a senior-class protection instrument against malware and DDoS attacks. The potential of DNIDS, however, can only be realized when their use is accompanied by appropriate deployment strategies.

This seminar will focus on describing different strategies for cost efficient network monitoring and filtering. The strategies are based on new complex network centrality measures that were developed in order to take into account real life considerations such as multitude of routes between each pair of endpoints, traffic matrices & routing strategies, and cost of feature acquisition.

The effectiveness of the monitors' and filters' deployment strategies was evaluated using a dedicated network simulator that was developed. The simulator is intended to support network security personnel in optimizing the placement and configuration of malware filtering and monitoring devices (such as DNIDS) within Network Service Providers' (NSP) infrastructure, and enterprise communication networks.