title: ÐÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÐ¹ ÐºÐ¾Ð¼Ð¿Ð»ÐµÐºÑ ÑÐ±Ð¾ÑÐ°, Ñ ÑÐ°Ð½ÐµÐ½Ð¸Ñ Ð¸ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÑÐ°ÑÐ¸ÑÑÐ¸ÐºÐ¸ ÑÐµÑÐµÐ²Ð¾Ð³Ð¾ ÑÑÐ°ÑÐ¸ÐºÐ°
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð¼Ð°Ð³Ð¸ÑÑÑÐ°
titleType: Subtitle
title: Software system for collecting, storing and analyzing of network traffic statistics
Creators: name: ÐÐ½Ð¸ÐºÐ¸Ð½, ÐÐ¸ÐºÐ¸ÑÐ°
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2023
Subjects: ÑÐµÑÐµÐ²Ð¾Ð¹ ÑÑÐ°ÑÐ¸Ðº
Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÑ
Ð²ÑÑÐ¾ÐºÐ¾Ð½Ð°Ð³ÑÑÐ¶ÐµÐ½Ð½ÑÐµ ÑÐ¸ÑÑÐµÐ¼Ñ
network traffic
information security
high-load systems

description: Ð¦ÐµÐ»ÑÑ Ð²ÑÐ¿ÑÑÐºÐ½Ð¾Ð¹ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð¾Ð³Ð¾ ÐºÐ¾Ð¼Ð¿Ð»ÐµÐºÑÐ° ÑÐ±Ð¾ÑÐ°, ÑÑÐ°Ð½ÐµÐ½Ð¸Ñ Ð¸ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÑÐ°ÑÐ¸ÑÑÐ¸ÐºÐ¸ ÑÐµÑÐµÐ²Ð¾Ð³Ð¾ ÑÑÐ°ÑÐ¸ÐºÐ°, Ð¾Ð±ÐµÑÐ¿ÐµÑÐ¸Ð²Ð°ÑÑÐµÐ³Ð¾ Ð¿ÑÐ¸ÐµÐ¼, Ð´ÐµÐºÐ¾Ð´Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ðµ, Ð´Ð¾Ð¿Ð¾Ð»Ð½ÐµÐ½Ð¸Ðµ Ð¸ Ð°Ð½Ð°Ð»Ð¸Ð· ÑÑÐ°ÑÐ¸ÑÑÐ¸ÑÐµÑÐºÐ¸Ñ Ð´Ð°Ð½Ð½ÑÑ, ÑÑÐ¾ÑÐ¼Ð¸ÑÐ¾Ð²Ð°Ð½Ð½ÑÑ Ð¼Ð°ÑÑÑÑÑÐ¸Ð·Ð°ÑÐ¾ÑÐ°Ð¼Ð¸ Ð¿Ð¾ Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð»Ð°Ð¼ NetFlow/IPFIX, NetStream Ð¸ sFlow. ÐÐ»Ñ Ð´ÐµÑÐ°Ð»ÑÐ½Ð¾Ð³Ð¾ ÑÐ¾ÑÐ¼Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð·Ð°Ð´Ð°Ð½Ð¸Ñ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ð° Ð´Ð¾ÐºÑÐ¼ÐµÐ½ÑÐ°ÑÐ¸Ñ ÑÑÑÐµÑÑÐ²ÑÑÑÐµÐ³Ð¾ ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½Ð¾Ð³Ð¾ ÑÐµÑÐµÐ½Ð¸Ñ Cisco Stealthwatch Ð¸ ÐºÐ¾Ð´ Ð¾ÑÐºÑÑÑÐ¾Ð³Ð¾ Ð¿ÑÐ¾ÐµÐºÑÐ° RITA. ÐÐ±Ð½Ð¾Ð²Ð»ÐµÐ½Ð¾ ÑÐ°Ð½ÐµÐµ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½Ð¾Ðµ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð¾Ðµ ÑÑÐµÐ´ÑÑÐ²Ð¾ Ð¾Ð±ÑÐ°Ð±Ð¾ÑÐºÐ¸ Ð¿Ð°ÐºÐµÑÐ¾Ð², ÑÐ¾Ð´ÐµÑÐ¶Ð°ÑÐ¸Ñ ÑÑÐ°ÑÐ¸ÑÑÐ¸ÐºÑ ÑÐµÑÐµÐ²Ð¾Ð³Ð¾ ÑÑÐ°ÑÐ¸ÐºÐ°, ÑÑÐ¾ÑÐ¼Ð¸ÑÐ¾Ð²Ð°Ð½Ð½ÑÑ Ð¿Ð¾ Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð»Ð°Ð¼ NetFlow/IPFIX, NetStream Ð¸ sFlow. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð¾ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð¾Ðµ ÑÑÐµÐ´ÑÑÐ²Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÑÐ°ÑÐ¸ÑÑÐ¸ÐºÐ¸ ÑÐµÑÐµÐ²Ð¾Ð³Ð¾ ÑÑÐ°ÑÐ¸ÐºÐ°, ÑÐ°Ð±Ð¾ÑÐ°ÑÑÐµÐ³Ð¾ Ñ Ð²ÑÑÐ¾Ð´Ð½ÑÐ¼Ð¸ ÑÐ¾Ð¾Ð±ÑÐµÐ½Ð¸ÑÐ¼Ð¸ ÑÑÐµÐ´ÑÑÐ²Ð° Ð¾Ð±ÑÐ°Ð±Ð¾ÑÐºÐ¸. ÐÐ°Ð»Ð°Ð¶ÐµÐ½Ð¾ Ð²Ð·Ð°Ð¸Ð¼Ð¾Ð´ÐµÐ¹ÑÑÐ²Ð¸Ðµ Ð´Ð°Ð½Ð½ÑÑ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ð¹ Ñ ÐºÐ¾Ð½ÐµÑÐ½ÑÐ¼Ð¸ ÑÐ¸ÑÑÐµÐ¼Ð°Ð¼Ð¸ ÑÑÐ°Ð½ÐµÐ½Ð¸Ñ. ÐÑÐ¾Ð²ÐµÐ´ÐµÐ½Ñ ÑÑÐ½ÐºÑÐ¸Ð¾Ð½Ð°Ð»ÑÐ½Ð¾Ðµ, Ð¼Ð¾Ð´ÑÐ»ÑÐ½Ð¾Ðµ, Ð½Ð°Ð³ÑÑÐ·Ð¾ÑÐ½Ð¾Ðµ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð¸ ÑÑÐ°ÑÐ¸ÑÐµÑÐºÐ¸Ð¹, Ð´Ð¸Ð½Ð°Ð¼Ð¸ÑÐµÑÐºÐ¸Ð¹ Ð°Ð½Ð°Ð»Ð¸Ð·Ñ, Ð° ÑÐ°ÐºÐ¶Ðµ ÑÐ°Ð·Ð·Ð¸Ð½Ð³. ÐÐ»Ñ ÑÐ±Ð¾ÑÐºÐ¸ Ð¸ ÑÐºÑÐ¿Ð»ÑÐ°ÑÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð³Ð¾ ÑÐ°Ð·Ð²ÑÑÑÑÐ²Ð°Ð½Ð¸Ñ Ð½Ð°ÑÑÑÐ¾ÐµÐ½Ð° ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ¸Ð·Ð°ÑÐ¸Ñ Ð¿ÑÐ¸ Ð¿Ð¾Ð¼Ð¾ÑÐ¸ Docker. ÐÐ»Ñ Ð²ÑÐµÑ Ð¾Ð¿Ð¸ÑÐ°Ð½Ð½ÑÑ Ð´ÐµÐ¹ÑÑÐ²Ð¸Ð¹ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½ Ð¿Ð»Ð°Ð½ Ð´Ð°Ð»ÑÐ½ÐµÐ¹ÑÐ¸Ñ ÑÐ°Ð±Ð¾Ñ, Ð½Ð°Ð¿ÑÐ°Ð²Ð»ÐµÐ½Ð½ÑÑ Ð½Ð° Ð¿Ð¾Ð»Ð½Ð¾Ðµ Ð´Ð¾ÑÑÐ¸Ð¶ÐµÐ½Ð¸Ðµ ÑÐµÐ»ÐµÐ²Ð¾Ð¹ ÑÑÐ½ÐºÑÐ¸Ð¾Ð½Ð°Ð»ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ¾Ð¼Ð¿Ð»ÐµÐºÑÐ°, ÑÐ»ÑÑÑÐµÐ½Ð¸Ðµ ÐµÐ³Ð¾ Ð¿ÑÐ¾Ð¸Ð·Ð²Ð¾Ð´Ð¸ÑÐµÐ»ÑÐ½Ð¾ÑÑÐ¸, Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ðµ Ð²ÑÐµÑÑÐ¾ÑÐ¾Ð½Ð½ÐµÐ³Ð¾ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ, Ð¿Ð¾Ð»Ð½ÑÑ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ¸Ð·Ð°ÑÐ¸Ñ. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½ÑÐµ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÐµ ÑÑÐµÐ´ÑÑÐ²Ð° Ð±ÑÐ´ÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð² ÑÐ¾ÑÑÐ°Ð²Ðµ Ð¿ÑÐ¾ÐµÐºÑÐ° Efros Defence Operations, Ð¿ÑÐ¸Ð½Ð°Ð´Ð»ÐµÐ¶Ð°ÑÐµÐ³Ð¾ ÐÐÐ Â«ÐÐ°Ð·Ð¸Ð½ÑÐ¾ÑÐ¼ÑÐµÑÐ²Ð¸ÑÂ».
description: A qualification graduation work goal is to develop a software system for collecting, storing and analyzing of network traffic statistics, providing reception, decoding, addition and analysis of statistical data generated by routers using NetFlow/IPFIX, NetStream and sFlow protocols. To obtain a detailed technical specification, the documentation of the existing Cisco Stealthwatch enterprise solution and the code of the RITA open-source project were analyzed. The previously developed software tool for processing packets containing network traffic statistics generated by NetFlow/IPFIX, NetStream and sFlow protocols has been updated. A software tool for analyzing network traffic statistics working with output messages of the processing tool has been developed. The interaction of these applications with the end storage systems has been established. Functional, unit, load testing and static, dynamic analyses, as well as fuzzing were carried out. Containerization using Docker is used for building and operational deployment. For all the described actions, a plan of further work has been developed aimed at fully achieving the target functionality of the software system, improving its performance, conducting comprehensive testing, and complete containerization. The developed software will be used as part of the Efros Defence Operations project, owned by OOO "Gazinformservis".