An Overview of IP Flow-Based Intrusion Detection

484 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Network Anomaly Detection: Methods, Systems and Tools (2014, background): “Methods /NIDSs /Tools Topics covered [8] [10] [11] [6] [16] [17] [3] [7] [21] [26] [29] [31] [32] [33] [34] Our survey”
Flow Monitoring Explained: From Packet Capture to Data Analysis With NetFlow and IPFIX (2014, background): “The central observation points at which flow export devices are usually deployed make flow export especially useful for the detection of the following attacks and malwares [84]: DDoS attacks, network scans, worm spreading, and botnet communication.”
A Survey of Data Mining and Machine Learning Methods for Cyber Security Intrusion Detection (2016, background): “[5] focus on Network Flow (NetFlow) data and point out that the packet processing may not be possible at the streaming speeds due to the amount of traffic.”
A Survey of Random Forest Based Methods for Intrusion Detection Systems (2018, methodology): “…(Figure 1), the commonly used method inputs are (i) Network traffic – packets or flow features (Haddadi and Zincir-Heywood 2016; Hofstede et al. 2014; Sperotto et al. 2010); (iv) Wireless network traffic – mainly features from the 802.11 protocol (Kumar and Dutta 2016; Sun et al. 2007; Zarpelão…”