Matches in SemOpenAlex for { <https://semopenalex.org/work/W2017058405> ?p ?o ?g. }
Showing items 1 to 91 of
91
with 100 items per page.
- W2017058405 endingPage "23" @default.
- W2017058405 startingPage "23" @default.
- W2017058405 abstract "There are times when it would be extraordinarily convenient to record the entire contents of a high-volume network traffic stream, in order to later travel back in time and inspect activity that has only become interesting in retrospect. Two examples are security forensics--determining just how an attacker compromised a given machine--and network trouble-shooting, such as inspecting the precursors to a fault after the fault. We describe the design and implementation of a Time Machine to efficiently support such recording and retrieval. The efficiency of our approach comes from leveraging the heavy-tailed nature of network traffic: because the bulk of the traffic in high-volume streams comes from just a few connections, by constructing a filter that records only the first N bytes of each connection we can greatly winnow down the recorded volume while still retaining both small connections in full, and the beginnings of large connections (which often suffices).The system is designed for operation in Gbps environments, running on commodity hardware. It can hold a few minutes of a high volume stream in RAM, and many hours to days on disk; the user can flexibly configure its operation to suit the site's nature. We present simulation and operational results from three distinct Gbps production environments exploring the feasibility and efficiency of a Time Machine implementation. The system has already proved useful in enabling analysis of a break-in at one of the sites." @default.
- W2017058405 created "2016-06-24" @default.
- W2017058405 creator A5002219113 @default.
- W2017058405 creator A5015612893 @default.
- W2017058405 creator A5020186770 @default.
- W2017058405 creator A5027274731 @default.
- W2017058405 creator A5055099878 @default.
- W2017058405 date "2005-10-19" @default.
- W2017058405 modified "2023-10-12" @default.
- W2017058405 title "Building a time machine for efficient recording and retrieval of high-volume network traffic" @default.
- W2017058405 cites W1516506771 @default.
- W2017058405 cites W1983051954 @default.
- W2017058405 cites W2111880704 @default.
- W2017058405 cites W2138381338 @default.
- W2017058405 cites W2148275477 @default.
- W2017058405 doi "https://doi.org/10.5555/1251086.1251109" @default.
- W2017058405 hasPublicationYear "2005" @default.
- W2017058405 type Work @default.
- W2017058405 sameAs 2017058405 @default.
- W2017058405 citedByCount "60" @default.
- W2017058405 countsByYear W20170584052012 @default.
- W2017058405 countsByYear W20170584052013 @default.
- W2017058405 countsByYear W20170584052014 @default.
- W2017058405 countsByYear W20170584052015 @default.
- W2017058405 countsByYear W20170584052016 @default.
- W2017058405 countsByYear W20170584052017 @default.
- W2017058405 countsByYear W20170584052018 @default.
- W2017058405 countsByYear W20170584052022 @default.
- W2017058405 crossrefType "proceedings-article" @default.
- W2017058405 hasAuthorship W2017058405A5002219113 @default.
- W2017058405 hasAuthorship W2017058405A5015612893 @default.
- W2017058405 hasAuthorship W2017058405A5020186770 @default.
- W2017058405 hasAuthorship W2017058405A5027274731 @default.
- W2017058405 hasAuthorship W2017058405A5055099878 @default.
- W2017058405 hasConcept C106131492 @default.
- W2017058405 hasConcept C111919701 @default.
- W2017058405 hasConcept C121332964 @default.
- W2017058405 hasConcept C124101348 @default.
- W2017058405 hasConcept C20556612 @default.
- W2017058405 hasConcept C2778484313 @default.
- W2017058405 hasConcept C31258907 @default.
- W2017058405 hasConcept C31972630 @default.
- W2017058405 hasConcept C41008148 @default.
- W2017058405 hasConcept C43364308 @default.
- W2017058405 hasConcept C62520636 @default.
- W2017058405 hasConcept C76155785 @default.
- W2017058405 hasConcept C79403827 @default.
- W2017058405 hasConcept C89198739 @default.
- W2017058405 hasConceptScore W2017058405C106131492 @default.
- W2017058405 hasConceptScore W2017058405C111919701 @default.
- W2017058405 hasConceptScore W2017058405C121332964 @default.
- W2017058405 hasConceptScore W2017058405C124101348 @default.
- W2017058405 hasConceptScore W2017058405C20556612 @default.
- W2017058405 hasConceptScore W2017058405C2778484313 @default.
- W2017058405 hasConceptScore W2017058405C31258907 @default.
- W2017058405 hasConceptScore W2017058405C31972630 @default.
- W2017058405 hasConceptScore W2017058405C41008148 @default.
- W2017058405 hasConceptScore W2017058405C43364308 @default.
- W2017058405 hasConceptScore W2017058405C62520636 @default.
- W2017058405 hasConceptScore W2017058405C76155785 @default.
- W2017058405 hasConceptScore W2017058405C79403827 @default.
- W2017058405 hasConceptScore W2017058405C89198739 @default.
- W2017058405 hasLocation W20170584051 @default.
- W2017058405 hasOpenAccess W2017058405 @default.
- W2017058405 hasPrimaryLocation W20170584051 @default.
- W2017058405 hasRelatedWork W1513132753 @default.
- W2017058405 hasRelatedWork W1516506771 @default.
- W2017058405 hasRelatedWork W1527137792 @default.
- W2017058405 hasRelatedWork W1627544262 @default.
- W2017058405 hasRelatedWork W1674877186 @default.
- W2017058405 hasRelatedWork W176053229 @default.
- W2017058405 hasRelatedWork W1763270762 @default.
- W2017058405 hasRelatedWork W2001474264 @default.
- W2017058405 hasRelatedWork W2039638209 @default.
- W2017058405 hasRelatedWork W2097980166 @default.
- W2017058405 hasRelatedWork W2107694471 @default.
- W2017058405 hasRelatedWork W2119026482 @default.
- W2017058405 hasRelatedWork W2123845384 @default.
- W2017058405 hasRelatedWork W2129700391 @default.
- W2017058405 hasRelatedWork W2138381338 @default.
- W2017058405 hasRelatedWork W2144261930 @default.
- W2017058405 hasRelatedWork W2171527796 @default.
- W2017058405 hasRelatedWork W2255206882 @default.
- W2017058405 hasRelatedWork W3041969239 @default.
- W2017058405 hasRelatedWork W40890042 @default.
- W2017058405 isParatext "false" @default.
- W2017058405 isRetracted "false" @default.
- W2017058405 magId "2017058405" @default.
- W2017058405 workType "article" @default.