This event has ended. View the official site or create your own event → Check it out
This event has ended. Create your own
View analytic
Tuesday, January 10 • 4:00pm - 4:30pm
Metrics-Focused Analysis of Network Flow Data

Sign up or log in to save this to your schedule and see who's attending!

This presentation discusses the use of network management metrics, and how these metrics may influence, or be influenced by, the analysis of network flow data. Using the Security Content Automation Protocol (SCAP) as a base set of data definitions for metrics description, the talk walks through several candidate metrics and describes how they can be used in network flow analysis. These metrics range from ones derived from host population counts to others derived from vulnerability scans. The talk includes several manufactured examples that were derived from real situations.

avatar for Timothy Shimeall

Timothy Shimeall

Senior Network Situational Awareness Analyst, CERT Program at Software Engineering Institute
The only person to make more than ten consecutive appearances at FloCon, Tim is the Senior Network Situational Awareness Analyst of the CERT Program at the Software Engineering Institute (SEI). Tim is responsible for developing methods to support decision making in security at and above the enterprise level, including identifying useful data collection. Of particular interest to him are methods that affect defended systems and malicious... Read More →

Tuesday January 10, 2017 4:00pm - 4:30pm
Great Room V-VIII 7450 Hazard Center Dr.

Attendees (22)