Detecção e análise proativa de anomalias no tráfego de rede.

Abstract

The computers networks are fundamental in the day-to-day of companies. In particular, the local networks (LANs) represent a vital part of the industry, which over time has generated operational dependence, positive results depend on the correct functioning. This situation, coupled with the use of networks at non-estimated levels, where the pattern of traffic varies greatly, has made it difficult to diagnose and maintain operational networks in situations that deviate from normal behavior patterns. To assist in the protection and availability it is necessary to analyze the traffic to detect possible anomalies. Currently, several solutions based on detection and analysis of network traffic anomalies are found in the literature, but not focused on local networks. Given the above facts, the present work of course completion aims to propose a tool for detection and analysis proactive of anomalies in local network traffic. Therefore, it will be using the detection methodology based on knowledge, together with traffic analysis to provide a database of signatures concerning anomalies known in local networks. The signature base will be a key part of the proposed tool for identifying anomalies in network traffic. This work also presents the goal of using the tool in real network infrastructures, considering small, medium and large companies in the region.