liuchuang/tifa-flow

tifa-flow

TIFAflow Introduction

Time Machine(TM) is a open source package integrated with Bro IDS system. TIFA integrates TimeMachine and FastBit.

TIFAflow enhance TIFA to store, index and query traffic with flow granularity.

Publications

Zhen Chen, Lingyun Ruan, Junwei Cao, Yifan Yu, and Xin Jiang. TIFAflow: enhancing traffic archiving system with flow granularity for forensic analysis in network security, Tsinghua Science and Technology, vol.18, no.4 , 2013.

http://ieeexplore.ieee.org/xpl/articleDetails.jsp?arnumber=6574679

Zhen Chen, Xi Shi, Ling-Yun Ruan, Feng Xie and Jun Li, High Speed Traffic Archiving System for Flow Granularity Storage and Querying, ICCCN workshop on PMECT, 2012.

http://ieeexplore.ieee.org/xpl/abstractMetrics.jsp?arnumber=6289215

Jun Li, Shuai Ding, Ming Xu, Fuye Han, Xin Guan, Zhen Chen. TIFA: Enabling Real-Time Querying and Storage of Massive Stream Data. Proc. International Conference on Networking and Distributed Computing (ICNDC), 2011.

http://ieeexplore.ieee.org/xpl/abstractMetrics.jsp?arnumber=6047107

Zhen Chen, Fuye Han, Junwei Cao, Xin Jiang, Shuo Chen, Cloud Computing-Based Forensic Analysis for Collaborative Network Security Management System, Tsinghua Science and Technology, 18 (1), pp.40-50, 2013.

http://ieeexplore.ieee.org/xpl/abstractAuthors.jsp?arnumber=6449406

saturn-team

Tsinghua National Lab for Information Science and Technoloy, Tsinghua University