FloCon 2017 has ended
Back To Schedule
Tuesday, January 10 • 4:00pm - 4:30pm
Metrics-Focused Analysis of Network Flow Data

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

This presentation discusses the use of network management metrics, and how these metrics may influence, or be influenced by, the analysis of network flow data. Using the Security Content Automation Protocol (SCAP) as a base set of data definitions for metrics description, the talk walks through several candidate metrics and describes how they can be used in network flow analysis. These metrics range from ones derived from host population counts to others derived from vulnerability scans. The talk includes several manufactured examples that were derived from real situations.

avatar for Timothy Shimeall

Timothy Shimeall

Senior Network Situational Awareness Analyst, CERT Program at Software Engineering Institute
The only person to make more than ten consecutive appearances at FloCon, Tim is the Senior Network Situational Awareness Analyst of the CERT Program at the Software Engineering Institute (SEI). Tim is responsible for developing methods to support decision making in security at and... Read More →

Tuesday January 10, 2017 4:00pm - 4:30pm PST
Great Room V-VIII 7450 Hazard Center Dr.