id sid tid token lemma pos 3f462516j4v 1 1 identity identity NOUN 3f462516j4v 1 2 of of ADP 3f462516j4v 1 3 network network NOUN 3f462516j4v 1 4 traffic traffic NOUN 3f462516j4v 1 5 is be AUX 3f462516j4v 1 6 becoming become VERB 3f462516j4v 1 7 increasingly increasingly ADV 3f462516j4v 1 8 important important ADJ 3f462516j4v 1 9 in in ADP 3f462516j4v 1 10 the the DET 3f462516j4v 1 11 definition definition NOUN 3f462516j4v 1 12 and and CCONJ 3f462516j4v 1 13 enforcement enforcement NOUN 3f462516j4v 1 14 of of ADP 3f462516j4v 1 15 security security NOUN 3f462516j4v 1 16 policies policy NOUN 3f462516j4v 1 17 in in ADP 3f462516j4v 1 18 an an DET 3f462516j4v 1 19 enterprise enterprise NOUN 3f462516j4v 1 20 network network NOUN 3f462516j4v 1 21 . . PUNCT 3f462516j4v 2 1 network network NOUN 3f462516j4v 2 2 management management NOUN 3f462516j4v 2 3 and and CCONJ 3f462516j4v 2 4 auditing auditing NOUN 3f462516j4v 2 5 require require VERB 3f462516j4v 2 6 a a DET 3f462516j4v 2 7 finer fine ADJ 3f462516j4v 2 8 granularity granularity NOUN 3f462516j4v 2 9 to to PART 3f462516j4v 2 10 be be AUX 3f462516j4v 2 11 associated associate VERB 3f462516j4v 2 12 with with ADP 3f462516j4v 2 13 the the DET 3f462516j4v 2 14 traffic traffic NOUN 3f462516j4v 2 15 flows flow VERB 3f462516j4v 2 16 in in ADP 3f462516j4v 2 17 addition addition NOUN 3f462516j4v 2 18 to to ADP 3f462516j4v 2 19 the the DET 3f462516j4v 2 20 host host NOUN 3f462516j4v 2 21 level level NOUN 3f462516j4v 2 22 . . PUNCT 3f462516j4v 3 1 unfortunately unfortunately ADV 3f462516j4v 3 2 , , PUNCT 3f462516j4v 3 3 the the DET 3f462516j4v 3 4 inability inability NOUN 3f462516j4v 3 5 of of ADP 3f462516j4v 3 6 current current ADJ 3f462516j4v 3 7 architecture architecture NOUN 3f462516j4v 3 8 results result NOUN 3f462516j4v 3 9 in in ADP 3f462516j4v 3 10 the the DET 3f462516j4v 3 11 local local ADJ 3f462516j4v 3 12 context context NOUN 3f462516j4v 3 13 of of ADP 3f462516j4v 3 14 the the DET 3f462516j4v 3 15 connectivity connectivity NOUN 3f462516j4v 3 16 in in ADP 3f462516j4v 3 17 terms term NOUN 3f462516j4v 3 18 of of ADP 3f462516j4v 3 19 the the DET 3f462516j4v 3 20 user user NOUN 3f462516j4v 3 21 and and CCONJ 3f462516j4v 3 22 application application NOUN 3f462516j4v 3 23 being be AUX 3f462516j4v 3 24 inferred infer VERB 3f462516j4v 3 25 from from ADP 3f462516j4v 3 26 the the DET 3f462516j4v 3 27 packet packet NOUN 3f462516j4v 3 28 content content NOUN 3f462516j4v 3 29 , , PUNCT 3f462516j4v 3 30 such such ADJ 3f462516j4v 3 31 as as ADP 3f462516j4v 3 32 ip ip NOUN 3f462516j4v 3 33 address address NOUN 3f462516j4v 3 34 and and CCONJ 3f462516j4v 3 35 port port NOUN 3f462516j4v 3 36 numbers number NOUN 3f462516j4v 3 37 . . PUNCT 3f462516j4v 4 1 it it PRON 3f462516j4v 4 2 is be AUX 3f462516j4v 4 3 this this DET 3f462516j4v 4 4 inference inference NOUN 3f462516j4v 4 5 that that PRON 3f462516j4v 4 6 frequently frequently ADV 3f462516j4v 4 7 results result VERB 3f462516j4v 4 8 in in ADP 3f462516j4v 4 9 overly overly ADV 3f462516j4v 4 10 coarse coarse ADJ 3f462516j4v 4 11 rules rule NOUN 3f462516j4v 4 12 for for ADP 3f462516j4v 4 13 the the DET 3f462516j4v 4 14 firewall firewall NOUN 3f462516j4v 4 15 in in ADP 3f462516j4v 4 16 the the DET 3f462516j4v 4 17 interest interest NOUN 3f462516j4v 4 18 of of ADP 3f462516j4v 4 19 performance performance NOUN 3f462516j4v 4 20 or or CCONJ 3f462516j4v 4 21 simply simply ADV 3f462516j4v 4 22 enabling enable VERB 3f462516j4v 4 23 connectivity connectivity NOUN 3f462516j4v 4 24 . . PUNCT 3f462516j4v 5 1 while while SCONJ 3f462516j4v 5 2 there there PRON 3f462516j4v 5 3 are be VERB 3f462516j4v 5 4 mechanisms mechanism NOUN 3f462516j4v 5 5 proposed propose VERB 3f462516j4v 5 6 in in ADP 3f462516j4v 5 7 the the DET 3f462516j4v 5 8 literature literature NOUN 3f462516j4v 5 9 that that PRON 3f462516j4v 5 10 purport purport VERB 3f462516j4v 5 11 to to PART 3f462516j4v 5 12 address address VERB 3f462516j4v 5 13 this this DET 3f462516j4v 5 14 issue issue NOUN 3f462516j4v 5 15 , , PUNCT 3f462516j4v 5 16 the the DET 3f462516j4v 5 17 reality reality NOUN 3f462516j4v 5 18 of of ADP 3f462516j4v 5 19 deployment deployment NOUN 3f462516j4v 5 20 often often ADV 3f462516j4v 5 21 negates negate NOUN 3f462516j4v 5 22 adoption adoption NOUN 3f462516j4v 5 23 of of ADP 3f462516j4v 5 24 such such ADJ 3f462516j4v 5 25 techniques technique NOUN 3f462516j4v 5 26 . . PUNCT 3f462516j4v 6 1 to to ADP 3f462516j4v 6 2 that that DET 3f462516j4v 6 3 end end NOUN 3f462516j4v 6 4 , , PUNCT 3f462516j4v 6 5 this this DET 3f462516j4v 6 6 work work NOUN 3f462516j4v 6 7 proposes propose VERB 3f462516j4v 6 8 a a DET 3f462516j4v 6 9 distributed distribute VERB 3f462516j4v 6 10 network network NOUN 3f462516j4v 6 11 data datum NOUN 3f462516j4v 6 12 collection collection NOUN 3f462516j4v 6 13 and and CCONJ 3f462516j4v 6 14 analysis analysis NOUN 3f462516j4v 6 15 system system NOUN 3f462516j4v 6 16 , , PUNCT 3f462516j4v 6 17 expsicor expsicor NOUN 3f462516j4v 6 18 , , PUNCT 3f462516j4v 6 19 that that PRON 3f462516j4v 6 20 pro pro ADJ 3f462516j4v 6 21 - - ADJ 3f462516j4v 6 22 actively actively ADV 3f462516j4v 6 23 gathers gather VERB 3f462516j4v 6 24 the the DET 3f462516j4v 6 25 missing miss VERB 3f462516j4v 6 26 characteristics characteristic NOUN 3f462516j4v 6 27 ( ( PUNCT 3f462516j4v 6 28 local local ADJ 3f462516j4v 6 29 context context NOUN 3f462516j4v 6 30 ) ) PUNCT 3f462516j4v 6 31 for for ADP 3f462516j4v 6 32 the the DET 3f462516j4v 6 33 purpose purpose NOUN 3f462516j4v 6 34 of of ADP 3f462516j4v 6 35 enterprise enterprise NOUN 3f462516j4v 6 36 network network NOUN 3f462516j4v 6 37 management management NOUN 3f462516j4v 6 38 . . PUNCT 3f462516j4v 7 1 by by ADP 3f462516j4v 7 2 combining combine VERB 3f462516j4v 7 3 the the DET 3f462516j4v 7 4 full full ADJ 3f462516j4v 7 5 visibility visibility NOUN 3f462516j4v 7 6 at at ADP 3f462516j4v 7 7 the the DET 3f462516j4v 7 8 end end NOUN 3f462516j4v 7 9 hosts host NOUN 3f462516j4v 7 10 ( ( PUNCT 3f462516j4v 7 11 through through ADP 3f462516j4v 7 12 such such ADJ 3f462516j4v 7 13 simple simple ADJ 3f462516j4v 7 14 tools tool NOUN 3f462516j4v 7 15 as as ADP 3f462516j4v 7 16 netstat netstat NOUN 3f462516j4v 7 17 , , PUNCT 3f462516j4v 7 18 ps ps PROPN 3f462516j4v 7 19 , , PUNCT 3f462516j4v 7 20 and and CCONJ 3f462516j4v 7 21 lsof lsof PROPN 3f462516j4v 7 22 ) ) PUNCT 3f462516j4v 7 23 and and CCONJ 3f462516j4v 7 24 the the DET 3f462516j4v 7 25 global global ADJ 3f462516j4v 7 26 aggregate aggregate ADJ 3f462516j4v 7 27 view view NOUN 3f462516j4v 7 28 at at ADP 3f462516j4v 7 29 the the DET 3f462516j4v 7 30 central central ADJ 3f462516j4v 7 31 management management NOUN 3f462516j4v 7 32 server server NOUN 3f462516j4v 7 33 , , PUNCT 3f462516j4v 7 34 it it PRON 3f462516j4v 7 35 is be AUX 3f462516j4v 7 36 demonstrated demonstrate VERB 3f462516j4v 7 37 how how SCONJ 3f462516j4v 7 38 local local ADJ 3f462516j4v 7 39 context context NOUN 3f462516j4v 7 40 improves improve VERB 3f462516j4v 7 41 network network NOUN 3f462516j4v 7 42 insight insight NOUN 3f462516j4v 7 43 , , PUNCT 3f462516j4v 7 44 and and CCONJ 3f462516j4v 7 45 can can AUX 3f462516j4v 7 46 be be AUX 3f462516j4v 7 47 used use VERB 3f462516j4v 7 48 for for ADP 3f462516j4v 7 49 security security NOUN 3f462516j4v 7 50 auditing auditing NOUN 3f462516j4v 7 51 , , PUNCT 3f462516j4v 7 52 finer fine ADJ 3f462516j4v 7 53 network network NOUN 3f462516j4v 7 54 management management NOUN 3f462516j4v 7 55 and and CCONJ 3f462516j4v 7 56 better well ADJ 3f462516j4v 7 57 policy policy NOUN 3f462516j4v 7 58 mapping mapping NOUN 3f462516j4v 7 59 without without ADP 3f462516j4v 7 60 costly costly ADJ 3f462516j4v 7 61 deployment deployment NOUN 3f462516j4v 7 62 overhead overhead NOUN 3f462516j4v 7 63 . . PUNCT 3f462516j4v 8 1 the the DET 3f462516j4v 8 2 system system NOUN 3f462516j4v 8 3 has have AUX 3f462516j4v 8 4 been be AUX 3f462516j4v 8 5 built build VERB 3f462516j4v 8 6 and and CCONJ 3f462516j4v 8 7 evaluated evaluate VERB 3f462516j4v 8 8 , , PUNCT 3f462516j4v 8 9 and and CCONJ 3f462516j4v 8 10 tools tool NOUN 3f462516j4v 8 11 for for ADP 3f462516j4v 8 12 visualizing visualize VERB 3f462516j4v 8 13 analyzing analyze VERB 3f462516j4v 8 14 data datum NOUN 3f462516j4v 8 15 have have AUX 3f462516j4v 8 16 been be AUX 3f462516j4v 8 17 developed develop VERB 3f462516j4v 8 18 . . PUNCT 3f462516j4v 9 1 the the DET 3f462516j4v 9 2 system system NOUN 3f462516j4v 9 3 has have AUX 3f462516j4v 9 4 been be AUX 3f462516j4v 9 5 deployed deploy VERB 3f462516j4v 9 6 on on ADP 3f462516j4v 9 7 over over ADP 3f462516j4v 9 8 150 150 NUM 3f462516j4v 9 9 + + NUM 3f462516j4v 9 10 machines machine NOUN 3f462516j4v 9 11 in in ADP 3f462516j4v 9 12 our our PRON 3f462516j4v 9 13 department department NOUN 3f462516j4v 9 14 . . PUNCT 3f462516j4v 10 1 many many ADJ 3f462516j4v 10 2 interesting interesting ADJ 3f462516j4v 10 3 analysis analysis NOUN 3f462516j4v 10 4 have have AUX 3f462516j4v 10 5 been be AUX 3f462516j4v 10 6 performed perform VERB 3f462516j4v 10 7 and and CCONJ 3f462516j4v 10 8 shown show VERB 3f462516j4v 10 9 in in ADP 3f462516j4v 10 10 this this DET 3f462516j4v 10 11 thesis thesis NOUN 3f462516j4v 10 12 based base VERB 3f462516j4v 10 13 on on ADP 3f462516j4v 10 14 the the DET 3f462516j4v 10 15 data datum NOUN 3f462516j4v 10 16 that that PRON 3f462516j4v 10 17 has have AUX 3f462516j4v 10 18 been be AUX 3f462516j4v 10 19 collected collect VERB 3f462516j4v 10 20 since since SCONJ 3f462516j4v 10 21 april april PROPN 3f462516j4v 10 22 2007 2007 NUM 3f462516j4v 10 23 . . PUNCT