FloCon 2015 Archive

At FloCon 2015, participants discussed the art of network analysis and how to make it more formal, rigorous, reliable, well-grounded, or repeatable. Participants also discussed academic advances in novel analytics and the operationalization and automation of well-known techniques.

This archive includes:

• Advances in Semantically Augmented Flow Data for Dynamic Impact Assessment, Response Selection, and Alert Prioritization, Nik Kinkel, Harris T. Lin, and Chris Strasburg
• Approaching Intelligent Analysis for Attribution and Tracking the Lifecycle of Threats, Timur D. Snoke
• Creating Preventive Digital Forensics Systems to Proactively Resolve Computer Security Incidents in Organizations, Jesus Ramirez Pichardo and Jesus Vazquez Gomez
• Discrete Mathematical Approaches to Traffic Graph Analysis, Cliff Joslyn, Wendy Cowley, Emilie Hogan, and Bryan Olsen
• Elasticsearch, Logstash, and Kibana (ELK), Dwight S. Beaver and Sean Hutchison
• Encounter Complexes For Clustering Network Flow, Leigh B. Metcalf
• Enterprise Data Storage and Analysis on Apache Spark, Tim Barr
• Finding a Needle in a PCAP, Emily Sarneso
• Flow Storage Revisited: Is It Time to Re-Architect Flow Storage and Processing Systems?, John McHugh
• Graph Based Role Mining Techniques for Cyber Security, Kiri Oler and Sutanay Choudhury
• Increasing the Insight from Network Flows--Connecting Science to Operational Reality, Grant Babb
• Indicator Expansion with Analysis Pipeline, Daniel Ruef
• Locality: A Semi-Formal Flow Dimension, John Gerth
• Modeling the Active and Idle Durations of Network Hosts, Soumyo D. Moitra
• Monitoring Virtual Networks, George Warnagiris
• Network Flow Analysis at SCinet, Eric Dull and Steven Reinhardt
• Network Flow Analysis in Information Security Strategy, Timothy J. Shimeall
• Semantic Representations of Network Flow: A Proposed Standard with the What, the Why, and the How, Eric Dull, Rachel Kartch, and Robert Techentin
• SSH Compromise Detection Using NetFlow/IPFIX, Rick Hofstede and Luuk Hendriks
• StreamWorks – A System for Real-Time Graph Pattern Matching on Network Traffic, George Chin, Sutanay Choudhury, and Khushbu Agarwal
• Toa: A Web-Based NetFlow Data Network Monitoring System, José R. Ortiz Ubarri, Humberto Ortiz-Zuazaga, Eric Santos, Albert Maldonado, and Jhensen Grullon
• Using Vantage to Manage Complex Sensor Networks, Michael Collins