Reverse hashing for high-speed network monitoring: Algorithms, evaluation, and applications

Proceedings - IEEE INFOCOM

Volumn , Issue , 2006, Pages

  Schweller, Robert ^a   Li, Zhichun ^a   Chen, Yan ^a   Gao, Yan ^a   Gupta, Ashish ^a   Zhangf, Yin ^b   Dinda, Peter ^a   Kao, Ming Yang ^a   Memik, Gokhan ^a  

^a Northwestern University   (United States)

^b University of Texas at Austin   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

HIGH SPEED LINKS; NETWORK TRAFFIC; REVERSE HASHING;

QUEUEING NETWORKS; REVERSE ENGINEERING; STATISTICAL MECHANICS; TELECOMMUNICATION LINKS; TELECOMMUNICATION TRAFFIC;

HIGH SPEED NETWORKS;

EID: 34249780184     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFOCOM.2006.203     Document Type: Conference Paper

References (25)

1. B. Krishnamurthy, S. Sen, Y. Zhang, and Y. Chen, "Sketch-based change detection: Methods, evaluation, and applications," in Proc. of ACM SIGCOMMIMC, 2003.
2. R. Schweller, A. Gupta, E. Parsons, and Y. Chen, "Reversible sketches for efficient and accurate change detection over network data streams," in ACM SIGCOMMIMC, 2004.
3. G. Cormode and S. Muthukrishnan, "What's new: Finding significant differences in network data streams," in Proc. of IEEE Infocom, 2004.
4. C. Estan et al., "New directions in traffic measurement and accounting," in Proc. of ACM SIGCOMM, 2002.
5. Graham Cormode et al., "Finding hierarchical heavy hitters in data streams," in Proc. of VLDB 2003, 2003.
6. G. Cormode et al., "Holistic UDAFs at streaming speeds," in Proc. of ACM SIGMOD, 2004.
7. G. S. Manku and R. Motwani, "Approximate frequency counts over data streams," in Proc. of IEEE VLDB, 2002.
8. R. S. Tsay, "Time series model specification in the presence outliers," Journal of the American Statistical Association, vol. 81, pp. 132141, 1986.
9. G. Cormode and S. Muthukrishnan, "Improved data stream summaries: The count-min sketch and its applications," Tech. Rep. 2003-20, DIMACS, 2003.
10. Philippe Flajolet and G. Nigel Martin, "Probabilistic counting algorithms for data base applications," J. Comput. Syst. Sci., vol. 31, no. 2, pp. 182-209, 1985.
11. A. C. Gilbert et al., "QuickSAND: Quick summary and analysis of network data," Tech. Rep. 2001-43, DIMACS, 2001.
12. Yan Gao, Zhichun Li, and Yan Chen, "Towards a high-speed router-based anomaly/intrusion detection system," Tech. Rep. NWU-CS-05-011, Northwestern University, 2005.
13. Muthukrishnan, "Data streams: Algorithms and applications (short)," in Proc. of ACM SODA, 2003.
14. G. Cormode and S. Muthukrishnan, "Estimating dominance norms on multiple data streams," in Proceedings of the 11th European Symposium on Algorithms (ESA), 2003, vol. 2461.
15. Charles Robert Hadlock, Field Theory and its Classical Problems, Mathematical Association of America, 1978.
16. R. Schweller, Z. Li, Y. Chen, Y. Gao, A. Gupta, Y. Zhang, Peter Dinda, M. Kao, and G. Memik, "Reverse hashing for high-speed network monitoring: Algorithms, evaluation, and applications," Tech. Rep. 2004-31, Northwestern University, 2004.
17. J. Jung, V. Paxson, A. W. Berger, and H. Balakrishnan, "Fast portscan detection using sequential hypothesis testing," in Proceedings of the IEEE Symposium on Security and Privacy, 2004.
18. N. weaver, S. Staniford, and V. Paxson, "Very fast containment of scanning worms," in usenix security symposium, 2004.
19. H. Wang, D. Zhang, and K. G. Shin, "Detecting SYN flooding attacks," in Proc. of IEEE INFOCOM, 2002.
20. H. Wang, D. Zhang, and K. G. Shin, "Change-point monitoring for detection of DoS attacks," IEEE Transactions on Dependable and Secure Computing, vol. 1, no. 4, 2004.
21. Xilinx Inc., "SPEEDRouter v1.1 product specification," 2001.
22. Syplicity Inc., "Synlipfy Pro," http://www.synplicity.com.
23. N. Duffield et al., "Properties and prediction of flow statistics from sampled packet streams," in ACM SIGCOMMIMW, 2002.
24. C. Estan, S. Savage, and G. Varghese, "Automatically inferring patterns of resource consumption in network traffic," in Proc. of ACM SIGCOMM, 2003.
25. R. R. Kompella et al., "On scalable attack detection in the network," in Proc. of ACM/USENIX IMC, 2004.