Topology-based macroscopical response and control technology for network security event

Abstract

The large-scale network security events are becoming a major threat to internet. How to quickly detect and effectively control the network security events' spreading has become the research focus among network security experts. By combining active topology measurement with distributed anomaly detection, a large-scale network security events' discovery and cooperative system is proposed, which focuses on macroscopical alert analysis, control point selection, creating control suggestion etc. After the process of visualization, it exhibits preferable application effect. The experimental result proved that it offers administrators the direct decisive advice to prevent network security event from overspreading. © Springer-Verlag Berlin Heidelberg 2005.