Network Traffic Classification for Cybersecurity and Monitoring
summary
nDPI, an open-source deep packet inspection C library, is presented as a toolkit for real-time network traffic classification and anomaly detection (outliers, clusters, behavioural changes) on high-speed links (10 Gbit+). The talk covers algorithms and streaming techniques added to nDPI that let developers and analysts inspect traffic patterns and spot anomalies efficiently on commodity hardware, avoiding batch-heavy workflows and slow languages like Python/R.
AI-written summary · about
related talks
26mNetwork monitoring with FOSS
14mRe-architecting Traffic Analysis with Neural Network Interface Cards
51mAdvanced approaches to traffic inspection & network diagnosis w/
39mImproving OT Network and Host Baselines to Secure Critical Infrastructure
21mHigh-Performance Cloud Native Traffic Authentication Solutions
24mDeep Network Traffic Observability with Pktvisor and Prometheus
44mCilium - Container Security and Networking Using BPF and XDP
31mFlow-based Packet Processing Framework on DPDK and VPP