Correlating network services with operational mission impact

摘要

Correlating network events (device failures, network attacks, etc.) with mission or operational impact has traditionally been an ad hoc, manually intensive process. In this paper, we present a solution to the problem of correlating network events with the effect on the overall mission. Our approach is based on best practices identified in the information technology (IT) infrastructure library, which provides a framework for aligning IT services with the customer's operational requirements. Our solution, the mission service automation architecture (MSAA), correlates network traffic flows to operational capabilities using configuration management databases and independent software agents that encapsulate IT service management codes into network packet headers. Further, the MSAA automates and enhances the capability of network monitoring, access, and configuration mechanisms and provides increased levels of network security, awareness, performance, and control.