May 25 – 29, 2009
Umeå University
Europe/Zurich timezone

CINBAD - CERN Investigation of Network Behaviour Anomaly Detection

May 26, 2009, 1:30 PM
30m
Big Auditorium (kb3b1), KBC building (Umeå University)

Big Auditorium (kb3b1), KBC building

Umeå University

KBC Umeå Universitet Umeå, Sweden
Security and Networking Security and Networking II

Speaker

Mr Ryszard Erazm Jurga (CERN)

Description

The CINBAD (CERN Investigation of Network Behaviour and Anomaly Detection) project was launched in 2007 in collaboration with ProCurve Networking by HP. The project mission is to understand the behaviour of large computer networks (10,000 or more nodes) in the context of high performance computing and large campus installations such as CERN, whose network counts today roughly 70,000 Gigabit user ports. The goals of the project are to be able to detect traffic anomalies in such systems, perform trend analysis, automatically take counter measures and provide post-mortem analysis facilities. This talk will present the main project principles, data sources, data collection and analysis approaches as well as the initial findings.

Primary authors

Presentation materials