NETWORK TRAFFIC MONITORING SYSTEM

摘要

Evaluating network flow data and generating a graph corresponding to network application components. The nodes correspond to the application components, the edges to network flows. A model of normal application behavior is created and used to evaluate second flow data. A user is alerted if the second flow deviates from the normal behavior.