Tetration

1. Tetration

• header-based analysis
• data sources
  • HW sensors: N9k ASICs
  • SW sensors: OS agents
  • 3rd party: ERSPAN
• software agents enforce policy
• information collection
  • process name
  • process ID
  • username
• usage
  • application component discovery
  • whitelist application enforcement
  • forensics
  • policy effect modelling