Principles for Developing Comprehensive Network Visibility

We argue that for both defending against attacks and apprehending the scope of attacks after they are detected, there is great utility in attaining views of network activity that are unified across time and space. By this we mean enabling operators to apply particular analyses to both past and future activity in a coherent fashion, and applied across a wealth of information collected from a variety of monitoring points, including across administratively independent sites. We outline the core design goals necessary for building systems to develop such visibility in an operationally viable way.

• Type: Conference
• Year: 2008
• Where: USS
• Authors: Mark Allman, Christian Kreibich, Vern Paxson, Robin Sommer, Nicholas Weaver
• Keywords: Core Design Goals, Great Utility, Network Activity, Operating System, USS 2008