Distributed packet trace processing method for information security analysis

Abstract

Information security is an important topic today. Internet Service Providers use network traffic analysis for evaluating network performance, collecting statistics and detecting vulnerabilities. Analysing traffic traces collected from large network requires a computer system where both storage and computing resources can be scaled out to handle and process multi-Terabyte files. Cloud platforms and clustered file systems provide re-sizable compute and storage capacity. MapReduce programming model developed by Google, allows distributed processing of massive data amounts by defining map and reduce functions. In this paper, we propose a cloud computing framework based on MapReduce approach for fast internet traffic analytics. © 2014 Springer International Publishing.