Flow-Based Compromise Detection: Lessons Learned
Rick Hofstede, Aiko Pras, Anna Sperotto, Gabi Dreo Rodosek · IEEE Security & Privacy · 2018
Although the aggregated nature of exported flow data provides many advantages in terms of privacy and scalability, flow data may contain artifacts that impair data analysis. In this article, we investigate the differences between flow data analysis in theory and practice—that is, in lab environments and production networks.