Parallel Processing in Netflow Data Fusion - Cert

More documents

Recommendations

Info

Setting the Stage Cont…• Goals Cont…• Unified query interface (instead of scripting)• Ability to run against big datasets (withouthurting anyone else)• Iterative discovery by pivoting on results ofprevious queries• Large scale summary and computation• Beacon detection over long time ranges• Correlating with other indicators• System Level Social Network Analysis
Environment• Selected a computing cluster thatwas optimized for:• Very large joins• Large data searches• Fast indexed access to data• Index building does not affect end users• Index builds on one system, distributes toqueried nodes• Ability to partition on values and ranges
Page 1 and 2: Parallel Processing in NetflowData
Page 3 and 4: Agenda cont’d• Specific use cas
Page 8 and 9: Use Case: Social NetworkGrowth• S
Page 10 and 11: Use Case: SPAM Node and C2Discovery
Page 12 and 13: Use Case: Complex Fusion• Mixing

Parallel Processing in Netflow Data Fusion - Cert

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?