Communication-efficient online detection of network-wide anomalies

Proceedings - IEEE INFOCOM

Volumn , Issue , 2007, Pages 134-142

  Huang, Ling ^a   Nguyen, Xuanlong ^a   Garofalakis, Minos ^b   Hellerstein, Joseph M ^a   Jordan, Michael I ^a   Joseph, Anthony D ^a   Taftt, Nina ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b INTEL CORPORATION   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DISTRIBUTED COMPUTER SYSTEMS; INTELLIGENT SYSTEMS; INTERNET SERVICE PROVIDERS; ONLINE SYSTEMS; SIGNAL FILTERING AND PREDICTION;

NETWORK-WIDE ANOMALIES; ONLINE DETECTION; PRODUCTION NETWORK;

TELECOMMUNICATION NETWORKS;

EID: 34548337359     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOM.2007.24     Document Type: Conference Paper

References (25)

1. BARFORD, P., KLINE, J., PLONKA, D., AND RON. A. A signal analysis of network traffic anomalies. In IMW (2002).
2. BRAND, M. Fast low-rank modifications of the thin singular value decomposition. In Linear Algebra and Its Applications, 415(1) (2006)
3. BRUTLAG, J. Aberrant Behavior Detection in Timeseries for Network Monitoring. In LISA (2000).
4. CORMODE, G., AND GAROFALAKIS, M. Sketching streams through the net: Distributed approximate query tracking. In VLDB (2005).
5. DILMAN, M., AND RAZ, D. Efficient reactive monitoring. In IEEE INFOCOM (2001).
6. HUANG, L., NGUYEN, X. L., GAROFALAKIS, M., JORDAN, M., JOSEPH, A.D., AND TAFT, N. In-network PCA and anomaly detection. In NIPS (2006).
7. HUANG, L., NGUYEN, X. L., GAROFALAKIS, M., HELLERSTEIN, J.M., JORDAN, M., JOSEPH, A.D., AND TAFT, N. Communication-efficient online detection of network-wide anomalies. UCB Technical Report, August 2006.
8. HUEBSCH, R., AND ET AL. Querying the internet with pier. In VLDB (2003).
9. JACKSON, J. E. AND MUDHOLKAR, G. S. Control procedures for residuals associated with principal component analysis. In Technometrics, 21(3) (1979).
10. JAIN, A., CHANG, E. Y., AND WANG, Y.-F. Adaptive stream resource management using kalman filters. In ACM SIGMOD (2004).
11. JENSEN, D. R. AND SOLOMON, H. A Gaussian approximation for the distribution of definite quadratic forms. In J. Amer. Stat. Assoc., 67:898-902 (1972).
12. KERALAPURA, R., CORMODE, G., AND RAMAMIRTHAM, J. Communication-efficient distributed monitoring of thresholded counts. In ACM SIGMOD (2006).
13. LAKHINA, A., CROVELLA, M., AND DIOT, C. Diagnosing network-wide traffic anomalies. In ACM SIGCOMM (2004).
14. LAKHINA, A., PAPAGIANNAKI, K., CROVELLA, M., DIOT, C., KOLACZYK, E. D. AND TAFT, N. Structural analysis of network traffic flows. In ACM SIGMETRICS (2004).
15. MEDINA, A., LAKHINA, A., MATTA, I. AND BYERS, J. BRITE: an approach to universal topology generation. In MASCOTS (2001).
16. NUCCI, A., SRIDHARAN, A. AND TAFT, N. The problem of synthetically generating IP traffic matrices: initial recommendations. In ACM CCR (2005)
17. OLSTON, C., JIANG, J., AND WIDOM, J. Adaptive filters for continuous queries over distributed data streams. In ACM SIGMOD (2003).
18. PADMANABHAN, V. N., RAMABHADRAN, S., AND PADHYE, J. Netprofiler: Profiling wide-area networks using peer cooperation. In IPTPS (2005).
19. SHARFMAN, I., SCHUSTER, A. AND KEREN, D. A geometric approach to monitoring threshold functions over distributed data streams In ACM SIGMOD (2006).
20. SOULE, A., SALAMATIAN, K., AND TAFT, N. Combining filtering and statistical methods for anomaly detection. In IMC (2005).
21. SPRING, N., WETHERALL, D., AND ANDERSON, T. Scriptroute: A facility for distributed internet measurement. In USITS (2003).
22. STEWART, G. W., AND SUN, J.-G. Matrix Perturbation Theory. Academic Press, 1990.
23. XIE, Y., KIM, H.-A., CHALLARON, D. R., REITER, M. K., AND ZHANG, H. Seurat: A pointillist approach to anomaly detection. In RAID (2004).
24. YEGNESWARAN, V., BARFORD, P., AND JHA, S. Global intrusion detection in the domino overlay system. In NDSS (2004).
25. ZHANG, Y., GE, Z.-H., GREENBERG, A., AND ROUGHAN, M. Network anomography. In IMC (2005).