5-Tuple Approach

noun

Definition

1.The 5-tuple approach is a method for analyzing network traffic using five key attributes: source IP, destination IP, source port, destination port, and protocol.

Example

Analysts use the 5-tuple approach to isolate and investigate a compromised host by examining network logs.

Related Exams