C2PANDA

The Competence Center for Packet Acquisition and Network Data Analysis (C²PANDA) addresses key research questions relating to network forensics and IT security in modern, highly dynamic IT infrastructures. The focus is on current and future challenges in high-speed networks, virtualized environments and programmable network topologies, particularly in cloud and data center infrastructures. The scalable and modular research environment enables the systematic investigation of methods for loss-free acquisition, high-performance analysis and forensic evaluation of network data in complex and dynamic system contexts. A particular focus is on the analysis of security mechanisms and forensic procedures under conditions of very high data rates. With this in mind, Fachhochschule Dortmund is creating a test environment that is unique in Germany, capable of mapping transmission speeds of up to 800 Gbit/s and thus allowing research into packet loss, network anomalies and attack patterns in high-performance infrastructures under realistic conditions. By integrating physical hardware with virtualized infrastructures and software-defined networks, volatile, dynamic and distributed system states can also be scientifically investigated. As part of C²PANDA, new approaches to network monitoring, attack detection and digital forensics are being developed and evaluated in collaboration with external partners. At the same time, the competence center is establishing a long-term infrastructure for research, development and scientific qualification. The methods and tools developed in the project are to be made available as open source solutions and thus also support the transfer into practice.