Analýza síťových anomálií pomocí síťových statistik NetFlow

Abstract

The thesis is focused to possibility of network anomaly analysis with open-source tools NfSen, Suricata IDS and Bro IDS. Main goal is to find what opportunities those tools can offer and how deep they are able to detect anomalies. We are going to talk over about how to save captured data with NetFlow and pcap format. Also we will mention how to utilize those data in tools mentioned earlier. To verify those tools, we will make an attack against victim computer.