IEEE

Model-Driven Network Monitoring Using NetFlow Applied to Threat Detection

Abstract: In recent years, several research works have proposed the analysis of network flow information using machine learning in order to detect threats or anomalous activities. In this sense, ...
The Record

Hackers exploiting vulnerability affecting Zoho ManageEngine products: Rapid7

Researchers at cybersecurity firm Rapid7 have observed exploitation of a vulnerability affecting two dozen ManageEngine products from software company Zoho. The bug – CVE-2022-47966 – was patched in ...
IEEE

A data infrastructure for heterogeneous telemetry adaptation. Application to Netflow-based cryptojacking detection

Abstract: The increasing development of cryptocurrencies has brought cryptojacking as a new security threat in which attackers steal computing resources for cryptomining. The digitization of the ...
GitHub

GoogleCloudPlatform/df-ml-anomaly-detection

This repo provides a reference implementation of a Cloud Dataflow streaming pipelines that integrates with BigQuery ML, Cloud AI Platform, and AutoML (coming soon!) to perform anomaly detection use ...
GitHub

A tiny UDP proxy that can replicate traffic to one or more endpoints.

We needed a way to take a single netflow stream and send it to multiple endpoints. As this is a generic UDP replicator, it can be used for any traffic such as netflow, syslog etc. You could use ...