What you don't know about assaults on your network can hurt you. Network anomaly-detection products can alert you to nascent attacks. Network behavior anomaly detection, or NBAD, is a process by which the system learns what normal traffic flows look like, then detects aberrations. NBAD also can detect changes in traffic levels, which may indicate abnormal conditions. It boils down to two simple needs: Know what's happening on your network, as compared with what should be happening, and be able to spot and investigate suspi-cious situations.
展开▼
