20160211 packet x product brief(slideshare)
Download as pptx, pdf0 likes237 views
本文介绍了公司如何建立监测网络以优化网络流量的分析装置性能，强调了分析装置的成本与效益之间的考量。文档中提到多种监测网络架构的案例及其对网络效率提升和敏感数据保护的作用，并探讨了在信息安全投资中合适的监测方案。不同的技术手段如标签移除、流量聚合和敏感数据遮罩被提出，作为提升数据分析效能的重要策略。
1 of 14
Downloaded 11 times
![2016/3/7
Case 4 : 封包中的敏感資料遮罩
基於多種分析的需要,
網路封包會複製到多個裝置與
單位, 於是Syslog, VoIP message
(如SIP的電話號碼)或 DB Query
(可能只是為了效能調降)封包
內的敏感資訊也將因此曝光給
多個”其實並不需要這些資訊”
的裝置與有心人…
請用GRISM將其遮罩掉
右邊是遮罩身分證號碼的案例
Taiwan ID pattern:
b[a-zA-Z][1-2]{1}[0-9]{8 ?
Example: H123456789 , F129134567……
Original
Packets
After
Mask
DEMO Show
主題 敏感資料遮罩
時間 16:40-17:00
地點 103](https://image.slidesharecdn.com/20160211packetxproductbriefslideshare-160307000038/85/20160211-packet-x-product-brief-slideshare-13-320.jpg)
Ad
Recommended
2024 Trend Updates: What Really Works In SEO & Content Marketing
2024 Trend Updates: What Really Works In SEO & Content MarketingSearch Engine Journal
?
The document outlines key SEO and content marketing trends for 2024, emphasizing the impact of AI, the importance of E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness), and a shift towards user-centric content strategies. It advises against focusing on outdated trends like voice search and stresses the need for creating value-driven, authoritative content. Additionally, it highlights the need to leverage AI as a supportive tool rather than relying solely on it for content creation.Storytelling For The Web: Integrate Storytelling in your Design Process
Storytelling For The Web: Integrate Storytelling in your Design ProcessChiara Aliotta
?
The document outlines a livestream presentation by Chiara Aliotta on integrating storytelling into web design to enhance user experiences. It covers the storytelling process for designers, emphasizing aspects such as understanding the audience, structuring narratives, and creating emotional connections. The presentation also includes case studies and practical examples to demonstrate effective storytelling in UX/UI design.Artificial Intelligence, Data and Competition – SCHREPEL – June 2024 OECD dis...
Artificial Intelligence, Data and Competition – SCHREPEL – June 2024 OECD dis...OECD Directorate for Financial and Enterprise Affairs
?
This presentation by Thibault Schrepel, Associate Professor of Law at Vrije Universiteit Amsterdam University, was made during the discussion “Artificial Intelligence, Data and Competition” held at the 143rd meeting of the OECD Competition Committee on 12 June 2024. More papers and presentations on the topic can be found at oe.cd/aicomp.
This presentation was uploaded with the author’s consent.
How to Leverage AI to Boost Employee Wellness - Lydia Di Francesco - SocialHR...
How to Leverage AI to Boost Employee Wellness - Lydia Di Francesco - SocialHR...SocialHRCamp
?
The document discusses leveraging AI to enhance employee wellness through data analytics, automating tasks, and personalized wellness apps, emphasizing the shared responsibility of employee well-being between leaders and organizations. It outlines best practices for using AI in wellness strategies, including ensuring data privacy and security, understanding employee needs, and promoting inclusivity. Lydia Di Francesco, a wellness specialist, shares insights to optimize workplace wellness strategy using AI-driven data analytics and encourages collaboration and transparency.2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by HubspotMarius Sescu
?
The State of Marketing 2024 report highlights the transformative impact of AI and automation, emphasizing the importance of personalization and engagement to drive growth in a competitive landscape. Marketers are focusing on optimizing budgets, leveraging social media for brand awareness, and utilizing AI tools to enhance efficiency across tasks. Key trends for 2024 include the rise of experiential marketing, content creation that meets user needs, and strengthened connections through personalized customer experiences.Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPTExpeed Software
?
ChatGPT is an AI chatbot developed by OpenAI, built on advanced language models to facilitate human-like conversational interactions. Launched in November 2022, it utilizes a transformer architecture to understand and generate text, with applications ranging from content creation to customer service. Despite its capabilities, there are concerns about potential misuse and biases in its responses, which OpenAI aims to mitigate through moderation and user feedback.Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage EngineeringsPixeldarts
?
The realm of product design is a constantly changing environment where technology and style intersect. Every year introduces fresh challenges and exciting trends that mold the future of this captivating art form. In this piece, we delve into the significant trends set to influence the look and functionality of product design in the year 2024.How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthThinkNow
?
The November 2023 mental health report indicates that 70% of respondents rate their mental health as 'good' or 'excellent,' with higher diagnoses reported among African Americans and non-Hispanic whites compared to Hispanics and Asians. Younger generations, particularly Gen Z and millennials, are more likely to experience mental health challenges, seek information online, and report that their mental health impacts their work and relationships. Half of the respondents feel comfortable discussing their mental health with professionals, although Gen Z shows the least comfort in this area.AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfmarketingartwork
?
Creative operations teams expect increased AI use in 2024. Currently, over half of tasks are not AI-enabled, but this is expected to decrease in the coming year. ChatGPT is the most popular AI tool currently. Business leaders are more actively exploring AI benefits than individual contributors. Most respondents do not believe AI will impact workforce size in 2024. However, some inhibitions still exist around AI accuracy and lack of understanding. Creatives primarily want to use AI to save time on mundane tasks and boost productivity.Skeleton Culture Code
Skeleton Culture CodeSkeleton Technologies
?
Organizational culture includes values, norms, systems, symbols, language, assumptions, beliefs, and habits that influence employee behaviors and how people interpret those behaviors. It is important because culture can help or hinder a company's success. Some key aspects of Netflix's culture that help it achieve results include hiring smartly so every position has stars, focusing on attitude over just aptitude, and having a strict policy against peacocks, whiners, and jerks.PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024Neil Kimberley
?
PepsiCo provided a safe harbor statement noting that any forward-looking statements are based on currently available information and are subject to risks and uncertainties. It also provided information on non-GAAP measures and directing readers to its website for disclosure and reconciliation. The document then discussed PepsiCo's business overview, including that it is a global beverage and convenient food company with iconic brands, $91 billion in net revenue in 2023, and nearly $14 billion in core operating profit. It operates through a divisional structure with a focus on local consumers.Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)contently
?
This document provides an overview of content methodology best practices. It defines content methodology as establishing objectives, KPIs, and a culture of continuous learning and iteration. An effective methodology focuses on connecting with audiences, creating optimal content, and optimizing processes. It also discusses why a methodology is needed due to the competitive landscape, proliferation of channels, and opportunities for improvement. Components of an effective methodology include defining objectives and KPIs, audience analysis, identifying opportunities, and evaluating resources. The document concludes with recommendations around creating a content plan, testing and optimizing content over 90 days.How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024Albert Qian
?
The document provides guidance on preparing a job search for 2024. It discusses the state of the job market, focusing on growth in AI and healthcare but also continued layoffs. It recommends figuring out what you want to do by researching interests and skills, then conducting informational interviews. The job search should involve building a personal brand on LinkedIn, actively applying to jobs, tailoring resumes and interviews, maintaining job hunting as a habit, and continuing self-improvement. Once hired, the document advises setting new goals and keeping skills and networking active in case of future opportunities.Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsKurio // The Social Media Age(ncy)
?
The 2024 social media marketing trends report highlights significant shifts influenced by generative AI, including the emergence of personalized content, the rise of virtual influencers, and a stronger focus on user-generated content. Insights were gathered from 33 experts across 23 leading independent agencies, providing a perspective that emphasizes creativity and authenticity in marketing strategies. Key trends also include the blending of B2B and B2C approaches, reflecting changes in consumer behavior and the evolving landscape of social media engagement.Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Search Engine Journal
?
The document discusses trends in paid search for 2024, highlighting changes in user behavior, the implications for financial services, and privacy challenges. It emphasizes the importance of adapting search strategies, utilizing AI-driven tools like performance max and smart bidding, and leveraging first-party data for better marketing efficacy. Key takeaways include holistic SEO and SEM approaches, monitoring shifting user intents, and the need for continuous performance evaluation.5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summarySpeakerHub
?
The document outlines five public speaking tips from Chris Anderson, TED Talks curator, emphasizing the importance of eye contact, vulnerability, humor, humility, and storytelling. These skills are presented as essential for engaging audiences effectively and are increasingly valuable in today's economy. The article posits that mastering these techniques can enhance speakers' ability to communicate ideas powerfully.ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd Clark Boyd
?
The document provides an overview of generative AI, particularly focusing on ChatGPT and its implications for business and the job market. It discusses the rapid growth of generative AI, its applications in marketing, and the skills needed for the AI era while addressing potential job displacement and the need for adaptation. The agenda includes a Q&A session and emphasizes rethinking work in collaboration with AI technology.Getting into the tech field. what next
Getting into the tech field. what next Tessa Mero
?
The document provides career advice for getting into the tech field, including:
- Doing projects and internships in college to build a portfolio.
- Learning about different roles and technologies through industry research.
- Contributing to open source projects to build experience and network.
- Developing a personal brand through a website and social media presence.
- Networking through events, communities, and finding a mentor.
- Practicing interviews through mock interviews and whiteboarding coding questions.Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentLily Ray
?
1. Core updates from Google periodically change how its algorithms assess and rank websites and pages. This can impact rankings through shifts in user intent, site quality issues being caught up to, world events influencing queries, and overhauls to search like the E-A-T framework.
2. There are many possible user intents beyond just transactional, navigational and informational. Identifying intent shifts is important during core updates. Sites may need to optimize for new intents through different content types and sections.
3. Responding effectively to core updates requires analyzing "before and after" data to understand changes, identifying new intents or page types, and ensuring content matches appropriate intents across video, images, knowledge graphs and more.How to have difficult conversations
How to have difficult conversations Rajiv Jayarajah, MAppComm, ACC
?
The document provides essential tips on how to handle difficult conversations in a workplace setting, emphasizing the importance of preparation, environment, and timing. It highlights that many employees dread such conversations, often leading to avoidance and worsening situations. Ultimately, the guide aims to promote positive outcomes while maintaining professional relationships.Introduction to Data Science
Introduction to Data ScienceChristy Abraham Joy
?
The document discusses the rise and importance of data science and machine learning, highlighting the growing demand for data scientists and the challenges they face. It explains machine learning concepts such as supervised and unsupervised learning, along with various real-world applications and the necessary steps involved in a machine learning workflow. Additionally, the document emphasizes the iterative process of model improvement and feature engineering used to enhance machine learning outcomes.Time Management & Productivity - Best Practices
Time Management & Productivity - Best PracticesVit Horky
?
The document outlines best practices for time management and productivity, focusing on effective meeting habits, structured work blocks, and the importance of reflection and goal setting. It emphasizes the need for proper planning, the use of appropriate tools, and prioritizing tasks to enhance both personal and team efficiency. Additionally, personal anecdotes and strategies are shared to encourage a positive mindset and enjoyment in achieving work-related goals.The six step guide to practical project management
The six step guide to practical project managementMindGenius
?
The document outlines a simplified six-step guide to project management designed for individuals lacking formal training. It emphasizes the importance of understanding project objectives, gathering stakeholder requirements, defining project scope, scheduling tasks, monitoring progress, and conducting a retrospective meeting. Additionally, it promotes the use of the MindGenius tool for effective project planning and execution.Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...RachelPearson36
?
A presentation for absolute beginners who have never touched TikTok and may be a bit scared of it!Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...Applitools
?
The document discusses the application of ChatGPT and AI in software testing and programming, including its strengths and limitations. It covers ChatGPT's capabilities, such as code writing, refactoring, and debugging, and emphasizes the importance of human expertise in the software development life cycle. Additionally, it highlights various AI tools, potential pitfalls, and offers strategies for integrating AI into testing practices.12 Ways to Increase Your Influence at Work
12 Ways to Increase Your Influence at WorkGetSmarter
?
The document outlines strategies for increasing influence in the workplace, emphasizing the importance of setting clear goals, building trust, and demonstrating consistency in actions. It also highlights the significance of relationship building, proactivity, and self-awareness regarding influencing styles. Lastly, it underscores that true leadership is about impact, influence, and inspiration rather than titles.ChatGPT webinar slides
ChatGPT webinar slidesAlireza Esmikhani
?
The document discusses various AI tools from OpenAI like GPT-3 and DALL-E 2, as well as ChatGPT. It explores how search engines are using AI and things to consider around AI-generated content. Potential SEO uses of ChatGPT are also presented, such as generating content at scale, conducting topic research, and automating basic coding tasks. The document encourages further reading on using ChatGPT for SEO purposes.More Related Content
Featured (20)
How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthThinkNow
?
The November 2023 mental health report indicates that 70% of respondents rate their mental health as 'good' or 'excellent,' with higher diagnoses reported among African Americans and non-Hispanic whites compared to Hispanics and Asians. Younger generations, particularly Gen Z and millennials, are more likely to experience mental health challenges, seek information online, and report that their mental health impacts their work and relationships. Half of the respondents feel comfortable discussing their mental health with professionals, although Gen Z shows the least comfort in this area.AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfmarketingartwork
?
Creative operations teams expect increased AI use in 2024. Currently, over half of tasks are not AI-enabled, but this is expected to decrease in the coming year. ChatGPT is the most popular AI tool currently. Business leaders are more actively exploring AI benefits than individual contributors. Most respondents do not believe AI will impact workforce size in 2024. However, some inhibitions still exist around AI accuracy and lack of understanding. Creatives primarily want to use AI to save time on mundane tasks and boost productivity.Skeleton Culture Code
Skeleton Culture CodeSkeleton Technologies
?
Organizational culture includes values, norms, systems, symbols, language, assumptions, beliefs, and habits that influence employee behaviors and how people interpret those behaviors. It is important because culture can help or hinder a company's success. Some key aspects of Netflix's culture that help it achieve results include hiring smartly so every position has stars, focusing on attitude over just aptitude, and having a strict policy against peacocks, whiners, and jerks.PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024Neil Kimberley
?
PepsiCo provided a safe harbor statement noting that any forward-looking statements are based on currently available information and are subject to risks and uncertainties. It also provided information on non-GAAP measures and directing readers to its website for disclosure and reconciliation. The document then discussed PepsiCo's business overview, including that it is a global beverage and convenient food company with iconic brands, $91 billion in net revenue in 2023, and nearly $14 billion in core operating profit. It operates through a divisional structure with a focus on local consumers.Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)contently
?
This document provides an overview of content methodology best practices. It defines content methodology as establishing objectives, KPIs, and a culture of continuous learning and iteration. An effective methodology focuses on connecting with audiences, creating optimal content, and optimizing processes. It also discusses why a methodology is needed due to the competitive landscape, proliferation of channels, and opportunities for improvement. Components of an effective methodology include defining objectives and KPIs, audience analysis, identifying opportunities, and evaluating resources. The document concludes with recommendations around creating a content plan, testing and optimizing content over 90 days.How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024Albert Qian
?
The document provides guidance on preparing a job search for 2024. It discusses the state of the job market, focusing on growth in AI and healthcare but also continued layoffs. It recommends figuring out what you want to do by researching interests and skills, then conducting informational interviews. The job search should involve building a personal brand on LinkedIn, actively applying to jobs, tailoring resumes and interviews, maintaining job hunting as a habit, and continuing self-improvement. Once hired, the document advises setting new goals and keeping skills and networking active in case of future opportunities.Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsKurio // The Social Media Age(ncy)
?
The 2024 social media marketing trends report highlights significant shifts influenced by generative AI, including the emergence of personalized content, the rise of virtual influencers, and a stronger focus on user-generated content. Insights were gathered from 33 experts across 23 leading independent agencies, providing a perspective that emphasizes creativity and authenticity in marketing strategies. Key trends also include the blending of B2B and B2C approaches, reflecting changes in consumer behavior and the evolving landscape of social media engagement.Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Search Engine Journal
?
The document discusses trends in paid search for 2024, highlighting changes in user behavior, the implications for financial services, and privacy challenges. It emphasizes the importance of adapting search strategies, utilizing AI-driven tools like performance max and smart bidding, and leveraging first-party data for better marketing efficacy. Key takeaways include holistic SEO and SEM approaches, monitoring shifting user intents, and the need for continuous performance evaluation.5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summarySpeakerHub
?
The document outlines five public speaking tips from Chris Anderson, TED Talks curator, emphasizing the importance of eye contact, vulnerability, humor, humility, and storytelling. These skills are presented as essential for engaging audiences effectively and are increasingly valuable in today's economy. The article posits that mastering these techniques can enhance speakers' ability to communicate ideas powerfully.ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd Clark Boyd
?
The document provides an overview of generative AI, particularly focusing on ChatGPT and its implications for business and the job market. It discusses the rapid growth of generative AI, its applications in marketing, and the skills needed for the AI era while addressing potential job displacement and the need for adaptation. The agenda includes a Q&A session and emphasizes rethinking work in collaboration with AI technology.Getting into the tech field. what next
Getting into the tech field. what next Tessa Mero
?
The document provides career advice for getting into the tech field, including:
- Doing projects and internships in college to build a portfolio.
- Learning about different roles and technologies through industry research.
- Contributing to open source projects to build experience and network.
- Developing a personal brand through a website and social media presence.
- Networking through events, communities, and finding a mentor.
- Practicing interviews through mock interviews and whiteboarding coding questions.Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentLily Ray
?
1. Core updates from Google periodically change how its algorithms assess and rank websites and pages. This can impact rankings through shifts in user intent, site quality issues being caught up to, world events influencing queries, and overhauls to search like the E-A-T framework.
2. There are many possible user intents beyond just transactional, navigational and informational. Identifying intent shifts is important during core updates. Sites may need to optimize for new intents through different content types and sections.
3. Responding effectively to core updates requires analyzing "before and after" data to understand changes, identifying new intents or page types, and ensuring content matches appropriate intents across video, images, knowledge graphs and more.How to have difficult conversations
How to have difficult conversations Rajiv Jayarajah, MAppComm, ACC
?
The document provides essential tips on how to handle difficult conversations in a workplace setting, emphasizing the importance of preparation, environment, and timing. It highlights that many employees dread such conversations, often leading to avoidance and worsening situations. Ultimately, the guide aims to promote positive outcomes while maintaining professional relationships.Introduction to Data Science
Introduction to Data ScienceChristy Abraham Joy
?
The document discusses the rise and importance of data science and machine learning, highlighting the growing demand for data scientists and the challenges they face. It explains machine learning concepts such as supervised and unsupervised learning, along with various real-world applications and the necessary steps involved in a machine learning workflow. Additionally, the document emphasizes the iterative process of model improvement and feature engineering used to enhance machine learning outcomes.Time Management & Productivity - Best Practices
Time Management & Productivity - Best PracticesVit Horky
?
The document outlines best practices for time management and productivity, focusing on effective meeting habits, structured work blocks, and the importance of reflection and goal setting. It emphasizes the need for proper planning, the use of appropriate tools, and prioritizing tasks to enhance both personal and team efficiency. Additionally, personal anecdotes and strategies are shared to encourage a positive mindset and enjoyment in achieving work-related goals.The six step guide to practical project management
The six step guide to practical project managementMindGenius
?
The document outlines a simplified six-step guide to project management designed for individuals lacking formal training. It emphasizes the importance of understanding project objectives, gathering stakeholder requirements, defining project scope, scheduling tasks, monitoring progress, and conducting a retrospective meeting. Additionally, it promotes the use of the MindGenius tool for effective project planning and execution.Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...RachelPearson36
?
A presentation for absolute beginners who have never touched TikTok and may be a bit scared of it!Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...Applitools
?
The document discusses the application of ChatGPT and AI in software testing and programming, including its strengths and limitations. It covers ChatGPT's capabilities, such as code writing, refactoring, and debugging, and emphasizes the importance of human expertise in the software development life cycle. Additionally, it highlights various AI tools, potential pitfalls, and offers strategies for integrating AI into testing practices.12 Ways to Increase Your Influence at Work
12 Ways to Increase Your Influence at WorkGetSmarter
?
The document outlines strategies for increasing influence in the workplace, emphasizing the importance of setting clear goals, building trust, and demonstrating consistency in actions. It also highlights the significance of relationship building, proactivity, and self-awareness regarding influencing styles. Lastly, it underscores that true leadership is about impact, influence, and inspiration rather than titles.ChatGPT webinar slides
ChatGPT webinar slidesAlireza Esmikhani
?
The document discusses various AI tools from OpenAI like GPT-3 and DALL-E 2, as well as ChatGPT. It explores how search engines are using AI and things to consider around AI-generated content. Potential SEO uses of ChatGPT are also presented, such as generating content at scale, conducting topic research, and automating basic coding tasks. The document encourages further reading on using ChatGPT for SEO purposes.20160211 packet x product brief(slideshare)
- 1. Build Your Monitoring Network tony.wang@packetx.biz 2016/3/7
- 2. 資訊安全 網路效能 應用效能 法規符合 數位行為稽核 使用者行為分析 … 每一議題皆有相應的產品方案, 其共通點如下 A. 以網路流量為主要分析標的 ps:故底下將此類產品統稱”網路封包分析裝置”, 簡稱”分析裝置” B. 以價格/流量 為比較依據, 分析裝置比一般網路設備更昂貴! C. 多種分析裝置已列入企業”MUST-BUY”的清單內, 但效益與整體擁有成本多半蒙昧不明 ps: 最常見must-buy的為資安類的IDS, IPS等等 企業網路的關鍵議題
- 3. 流量來源與分析裝置的 多對多網絡 圖引自: ESG Market Report July 11, 2012 分析裝置建置時經常輕忽的 事… 分析裝置如何取得網路流量 以進行分析? 傳統作法 交換機(L2/L3 switch)透過mirror port將流量複製到多個分析裝置 時, 如此會產生如右圖密集複雜 的網絡…
- 4. 如果說網路封包是行李, 網路分析裝置就如同X-ray設備, 那聰明的你會關心這些: - 挑出較可疑的行李優先處理?! - 迅速打開多層的行李包裹!? - 如何用最少的X-ray設備處裡最多行 李… 2016/3/7
- 6. 2016/3/7 新型態監測網路 媒合mirror port與分析裝置 的監測網路(monitoring network) 依各分析裝置之需求精確派 送封包: 提升分析裝置執行效 益並降低敏感資訊外流的風 險 進行封包分析前置處理(ex. MPLS/VLAN tag removal/HTTS bypass ),大幅減輕分析裝置負 擔
- 7. ? In-line 封包處理與辨識 以透通方式將link聚合後 分配到平行的分析裝置 ? 大數據資料萃取 Netflow V5 Application Flow Log : 辨識每一session屬於那種服務 ? 監測網路流量側錄 於近端或遠端寫錄PCAP檔 ? 精準過濾與分配 Many-to-Many port mapping and aggregation L2-L4 header value & L4-L7 pattern matching Session-based Load Balance 平等分配: 過濾條件交集封包複製 ? Out-of-band 封包預處理 Tag移除 or 再封裝: QinQ, MPLS, GRE, GTP… Packet Slicing : 切除封包部分內容 敏感資料遮罩: 自定內容遮罩(如身份證pattern) ? In-line 封包處理與辨識 以透通方式將link聚合 條件式分配到平行的In-line分析裝置 智慧型“部分旁路”機制 := NPB + DPI + SDN
- 9. 2016/3/7 Case 1: 監測網路基礎建設 精準過濾與分配 -L2-L4 header value -Load Balance -平等分配 右圖之IDS與APM均會 收到port 80, port 443的 封包 大數據資料萃取 - 產出Netflow V5 (with packet deduplication) 以強化網管機制與行為 分析能力且無須犧牲 Router/Switch的效能
- 10. Case 2: In-line共享資源 2016/3/7 1G 1G 1G 10G 1G 1G 1G 10G 1G 1G 1G 1G 1G 1G 10G10G 10G10G 10G Aggregation & Load Balance 10G IPS IPS In-line 封包處理 與辨識 以透通方式將 network link聚合c. 後再分配到平行 的In-line分析裝置 如此可將數條獨 立的link共享有限 的分析資源
- 11. 1G1G 1G L3 Switch L2 Switch 1G 1G 1G IPS1G 1G Content-based bypass Others Multi-Media or Encrypted (User Selected) WholeTraffic 70%30% Case 3: 多媒體流量旁路 Youtube與多媒體串流 將bypass資安設備 In-line 封包處理與辨識 多媒體流量(如YouTube)多半不具安全威脅, 可豁免其進入WAF/IPS, 以保留分析資源對付真正有威脅性的流量 DEMO Show 主題 智慧旁路 時間 16:40-17:00 地點 103
- 12. 2016/3/7 Case 5:監測網路虛擬化的實踐 Transportation Network Switch Switch Switch Switch APM DLP IDS Tunnel Tunnel 不受場域距離限制的監測能力 Production network的規劃經常遷就資安設備, 只因mirror流量傳輸能力有限; 運用GRISM的VxLAN 或X-tunnel 技術可以輕易地透過既有L2/L3/L4網路來傳輸mirror流量至分析資源集中地
- 13. 2016/3/7 Case 4 : 封包中的敏感資料遮罩 基於多種分析的需要, 網路封包會複製到多個裝置與 單位, 於是Syslog, VoIP message (如SIP的電話號碼)或 DB Query (可能只是為了效能調降)封包 內的敏感資訊也將因此曝光給 多個”其實並不需要這些資訊” 的裝置與有心人… 請用GRISM將其遮罩掉 右邊是遮罩身分證號碼的案例 Taiwan ID pattern: b[a-zA-Z][1-2]{1}[0-9]{8 ? Example: H123456789 , F129134567…… Original Packets After Mask DEMO Show 主題 敏感資料遮罩 時間 16:40-17:00 地點 103