Finding Attack Pattern from NetFlow Data

This thesis deals with detection of possible attacks in computer networks and subsequent generation of the most specific rules used for filtration. The goal of this thesis is to create tool, that will analyze incoming NetFlow data and will try to detect ongoing attacks. If there is ongoing attack detected, the tool will generate the most specific rules, based on recent NetFlow history, that can be used to filter packets associated with the attack