Network behavior analysis (NBA) is a way to enhance the security of a proprietary network by monitoring traffic and noting unusual actions or departures from normal operation. Conventional intrusion prevention system solutions defend a network's perimeter by using packet inspection, signature detection and real-time blocking. NBA solutions watch what's happening inside the network, aggregating data from many points to support offline analysis.

After establishing a benchmark for normal traffic, the NBA program passively monitors network activity and flags unknown, new or unusual patterns that might indicate the presence of a threat. The program can also monitor and record trends in bandwidth and protocol use. Network behavior analysis is particularly good for spotting new malware and zero day exploits.

A good NBA program can help a network administrator minimize the time and labor involved in locating and resolving problems. It should be used as an enhancement to the protection provided by the network's firewall, intrusion detection system, antivirus software and spyware-detection program.

For years, regular monitoring of network was performed by SNMP protocol. Today, when the availability and proper working of company's network is crucial for its existence, our customers desire for more sophisticated methods. Such methods must be able to provide real-time traffic statistics necessary for effective maintainance and securing of computer networks. Modern solution is a network monitoring system based on NetFlow.

You can implemente this scenario behind the "Mediation Layer" between Network and Tools. Lot of Network Paket Brocker can generate Netflow Data for further analysis with differnt tools.

Read more about "Mediation Layer" in Network Visibility Section

 

 

News

Help and Learning

At CSDINT, we work with an ecosystem of Vendors and partners to ensure that you get the most value from...

Blog

Location

Graz, Austria

+43 664 9257952

We transforms ideas into great experiences.

You need optimization layer between your network and and your analyzing tools ?

You need Network Analytics, Behavior Analysis, Data Loss Prevention, Network Testing for Security and Load ?

Mass IP Interception, Target Interception, Data Retention, Location Tracking and more ?

Are you System Integrator and interested to work with us. Our Network can help you in Supply Chain, Solution Design and Technical support. 

We are working with multiple vendors and partners to give you optimized solution for your requirements and budget. Our concept is to work with local System Integrators in all countries and support them to get the right solution for his customers. We operating worldwide excepting US.

 

 

Contact us