Advanced Security Reporting Systems for Large Network Situational Awareness
• SEI Report
Publisher
Software Engineering Institute
Topic or Tag
Abstract
In collaboration with NSA and JTF-GNO, the Network Situational Awareness (NetSA) group at CERT/CC, Software Engineering Institute, Carnegie Mellon University, has developed large-scale network traffic reporting systems that provide analysts with the capacity to dynamically query large summaries of network traffic over time. These systems are deployed on the NIPRNet as part of the JTF Centaur capability. In this presentation we describe the sensor and analysis technologies that support an asset inventory system, and serve as a foundation for a flexible, ad-hoc intrusion detection capability. These facilities have greatly increased our ability to respond strategically to information security challenges, and to detect novel threats to the NIPRNet, in an environment where both attacks and normal traffic are changing continuously.
Cite This SEI Report
Collins, M., & Virgin, G. (2005, June 1). Advanced Security Reporting Systems for Large Network Situational Awareness. Retrieved October 7, 2026, from https://www.sei.cmu.edu/library/advanced-security-reporting-systems-for-large-network-situational-awareness/.
@techreport{collins_2005,
author={Collins, Michael and Virgin, Greg},
title={Advanced Security Reporting Systems for Large Network Situational Awareness},
month={Jun},
year={2005},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/advanced-security-reporting-systems-for-large-network-situational-awareness/},
note={Accessed: 2026-Oct-7}
}
Collins, Michael, and Greg Virgin. "Advanced Security Reporting Systems for Large Network Situational Awareness." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, June 1, 2005. https://www.sei.cmu.edu/library/advanced-security-reporting-systems-for-large-network-situational-awareness/.
M. Collins, and G. Virgin, "Advanced Security Reporting Systems for Large Network Situational Awareness," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 1-Jun-2005 [Online]. Available: https://www.sei.cmu.edu/library/advanced-security-reporting-systems-for-large-network-situational-awareness/. [Accessed: 7-Oct-2026].
Collins, Michael, and Greg Virgin. "Advanced Security Reporting Systems for Large Network Situational Awareness." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 1 Jun. 2005. https://www.sei.cmu.edu/library/advanced-security-reporting-systems-for-large-network-situational-awareness/. Accessed 7 Oct. 2026.
Collins, Michael; & Virgin, Greg. Advanced Security Reporting Systems for Large Network Situational Awareness. Software Engineering Institute. 2005. https://www.sei.cmu.edu/library/advanced-security-reporting-systems-for-large-network-situational-awareness/
This content was created for a conference series or symposium and does not necessarily reflect the positions and views of the Software Engineering Institute.