Automatic profiling of network event sequences: Algorithm and applications

Proceedings - IEEE INFOCOM

Volumn , Issue , 2008, Pages 852-860

  Meng, Xiaoqiao ^a   Jiang, Guofei ^a   Zhang, Hui ^a   Chen, Haifeng ^a   Yoshihira, Kenji ^a  

^a NEC LABORATORIES AMERICA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER COMMUNICATIONS; EVENT SEQUENCES;

ADMINISTRATIVE DATA PROCESSING; APPLICATIONS; BOOLEAN FUNCTIONS; COMMUNICATION; INTERNET TELEPHONY; ITERATIVE METHODS; MANAGEMENT INFORMATION SYSTEMS; MARKOV PROCESSES; MEDICAL IMAGING; PARAMETER ESTIMATION; POWDERS; TELEPHONE SYSTEMS;

NETWORK MANAGEMENT;

EID: 51349116150     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFOCOM.2007.62     Document Type: Conference Paper

References (29)

1. Packet traces from UCLA Computer Science Department, "http://fmg- www.cs.ucla.edu/ddos/traces/."
2. R. Birke. M. Mellia, M. Petracca, and D. Rossi, "Underdtanding VoIP from backbone measurements," in IEEE INFOCOM. 2007.
3. A. Dempster, N. Laird, and D. Rubin, "Maximum likelihood from incomplete data via the EM algorithm," Journal of the Royal Statistical Society, vol. 39, no. B, pp. 1-38, 1977.
4. J. A. Bilmes, "A gentle tutorial on the EM algorithm and its application to parameter estimation for Gaussian mixture and hidden Markov models," ICSI-TR-97-021, 1997.
5. H. Akaike, "Information theory and extension of the maximum likelihood principle," in 2nd International Symposium on Information Theory, 1973, pp. 267-281.
6. SIPp, "http://sipp.sourceforge.net."
7. SIP Express Router, "http://www.iptel.org/ser/."
8. D. Kotz, T. Henderson, and I. Abyzov, "CRAWDAD data set dartmouth/campus (v. 2007-02-08)," Downloaded from http://crawdad.cs. danmouth.edu/dartmouth/campus, Feb. 2007.
9. M. Arlitt and C. Williamson, "An analysis of TCP reset behaviour on the internet," ACM Computer Communication Review, vol. 35, no. 1, pp. 37-44. February 2005.
10. P. A. Watson, "Slipping in the window: TCP reset attacks," 2003, technical whitepaper.
11. W. H. Press, B. P. Flannery, S. A. Teukolsky, and W. T. Vetterling, Numerical recipes in C: the art of scientific computing. New York, NY, USA: Cambridge University Press, 1988.
12. L.R.Rabiner, C.H.Lee, B.H.Juang, and J.G.Wilpon, "HMM clustering for connected word recognition," in proceedings of the International Conference on Acoustics, Speech and Signal Processing, 1989.
13. X.D.Huang, Y.Ariki, and M.Jack. Hidden Markov models for speech recognition. Edinburgh University Press, 1990.
14. R. Agrawal and R. Srikant, "Fast algorithms for mining association rules." in Int. Conf. Veiy Large Data Bases VLDB, 1994. pp. 487-499.
15. R.Agrawal and R.Srikant, "Mining sequential patterns," in proceedings of IEEE ICDE, March 1995.
16. R. Srikant and R. Agrawal, "Minining sequential patterns: generalizations and performance improvements," in Inc. Conf. on Extending Databse Technology EDBT, 1996, pp. 3-17.
17. I. Cadez, D. Heckerman, C. Meek, P. Smyth, and S. White, "Model-based clustering and visualization of navigation patterns on a web site," Data Mining Knowledge Discovery, vol. 7, no. 4, pp. 399-424, 2003.
18. W. Lee and S. J. Stolfo, "Data mining approaches for intrusion detection," in Proc. of the 7th USENIX Security Symposium. January 1998.
19. P.Smyth, "Hidden Markov monitoring for fault detection in dynamic systems," Pattern Recognition, vol. 27, no. 1. pp. 149-164, 1994.
20. V. Paxson, "Empirically-derived analytic models of wide-area TCP connections," IEEE/ACM Transactions on Networking, vol. 2, no. 4, August 1994.
21. N. Duffield, C. Lund, and M. Thorup, "Estimating flow distributions from sampled flow statistics," in proceedings of ACM SIGCOMM, 2003.
22. A. Kumar, M. Sung, J. xu, and J. Wang, "Data streaming algorithms for efficient and accurate estimation of flow size distribution." in ACM SIGMETRICS. 2004.
23. X. Meng, S. Wong, Y. Yuan, and S. Lu, "Characterizing flows in wireless data networks," in ACM MOBICOM, 2004.
24. C.Estan, S.Savage, and G.Varghese, "Automatically inferring patterns of resource consumption in network traffic," in proceedings of ACM SIGCOMM. 2003.
25. F.Hernandez-Campos. A.B.Nobel, F.D.Smith, and K.Jeffay, "Statistical clustering of Internet communication patterns," in Proc. of Symposium on the Inteiface of Computing Science and Statistics, 2003.
26. K. Xu, Z. Zhang, and S. Bhattacharyya, "Profiling Internet backbone traffic: behavior models and applications," in ACM SIGCOMM, 2005.
27. A.Lakhina, M.Crovella, and C.Diot, "Mining anomalies using traffic feature distributions," in ACM SIGCOMM, 2005.
28. T.Karagiannis. K.Papagiannaki, and M.Faloutsos, "BLINC: multilevel traffic classification in the dard," in ACM SIGCOMM, 2005.
29. A. Soule, K. Salamatian, N. Taft, R. Emilion, and K. Papagiannaki, "Flow classification by histograms: or how to go on safari in the internet." ACM SIGMETRICS Peiform. Eval. Rev., vol. 32, no. 1, pp. 49-60, 2004.