Exploiting causality and communication patterns in network data analysis

Proceedings of the 2008 16th IEEE Workshop on Local and Metropolitan Area Networks, LANMAN 2008

Volumn , Issue , 2008, Pages 114-119

  Pietikäinen, Pekka ^a   Viide, Joachim ^a   Röning, Juha ^a  

^a UNIVERSITY OF OULU   (Finland)

Author keywords

[No Author keywords available]

Indexed keywords

LOCAL AREA NETWORKS; NETWORK MANAGEMENT; SYSTEMS ENGINEERING; TECHNICAL PRESENTATIONS;

CAUSAL RELATIONSHIPS; COMMUNICATION PATTERNS; COMPLEX NETWORKS; INFORMATION FLOWS; NETWORK DATUMS; NETWORK SYSTEMS; RESEARCH PROTOTYPES; SECURITY RISKS;

METROPOLITAN AREA NETWORKS;

EID: 57849109920     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/LANMAN.2008.4675854     Document Type: Conference Paper

References (23)

1. S. McCanne and V. Jacobson. "The BSD packet filter: A new architecture for user-level packet capture" In USENIX Winter, pages 259-270, 1993.
2. J. Mogul, R. Rashid and M.Accetta, "The packet filter: An efficient mechanism for user-level network code." Proceedings of the 11th ACM Symposium on Operating Systems Principles (SOSP), vol. 21, pp. 39-51, 1987.
3. M. Bailey, B. Gopal, M. Pagels, L. Peterson and P. Sarkar, "PATHFINDER: A pattern-based packet classifier" Proceedings of the First Symposium on Operating Systems Design and Implementation (OSDI), pp. 115-123, 1994.
4. D. Engler and M. F. Kaashoek, "DPF: Fast, flexible message demultiplexing using dynamic code generation." Proceedings of ACM SIGCOMM, pp. 53-59, 1996.
5. K. Lahey, "RFC 2923: TCP Problems with Path MTU Discovery," Sept. 2000.
6. P. Pietikäinen, J. Röning, "Communication Pattern Extraction: Visualizing causal relationships in complex systems", 20th International Conference on Computers and Their Applications, New Orleans, LA, March 16-18, 2005.
7. J. Kenttälä, "Exploiting Communication Patterns in Complex Information Networks" M.Sc. Thesis for the Department of Information Processing Science at University of Oulu, Finland.
8. ITU-T Recommendation Z.100 (11/99) (1999) "Specification and Description Language (SDL)". International Telecommunication Union, Telecommunication Standardization Sector (ITU-T).
9. R. Kaksonen. "A Functional Method for Assessing Protocol Implementation Security" (Licentiate thesis). Espoo. Technical Research Centre of Finland, VTT Publications 448. 128 p. + app. 15 p. ISBN 951-38-5873-1 (soft back ed.) ISBN 951-38-5874-X (on-line ed.).
10. D. C. Luckham and J. Vera, "An event-based architecture definition language," IEEE Transactions on Software Engineering, vol. 21, no. 9, pp.717-734, Sept. 1995.
11. T. Basten, T. Kunz, J. Black, M. Coffin and D. Taylor, "Vector time and causality among abstract events in distributed computations" Distributed Computing, vol. 11, no. 1, pp. 21-39, 1997.
12. T. Kunz, J. P. Black, D. J. Taylor and T. Basten, "Poet: Targetsystem independent visualizations of complex distributed-application executions," The Computer Journal, vol. 40, no. 8, 1997.
13. Thomas Kunz and Michiel F. H. Seuren. "Fast detection of communication patterns in distributed executions" Proceedings of the 1997 conference of the Centre for Advanced Studies on Collaborative research. 1997a. Toronto, Ontario, Canada.
14. D. Agarwal, J. M. Gonzalez, G. Jin, B. Tierney "An Infrastructure for Passive Network Monitoring of Application Data Streams", 2003 Passive and Active Measurement Workshop , San Diego, CA, April 2003, LBNL-51846.
15. S. Kornexl, V. Paxson, H. Dreger, A. Feldmann and R. Sommer. "Build-ing a Time Machine for Efficient Recording and Retrieval of HighVolume Network Traffic". In IMC '05: Proceedings of the 5th ACM SIGCOMM Internet Measurement Conference, (Location: Berkeley, CA, USA), Pages 267-272, ACM Press, New York, NY, USA, 2005.
16. L. Lamport, "Time, Clocks and the Ordering of Events in a Distributed Environment," Communications of the ACM, vol. 21, pp. 558-564, July 1978.
17. C. Fidge, "Logical time in distributed computing systems," IEEE Computer, vol. 24, no. 8, pp. 28-33, 1991.
18. The Python Programming Language, [Online]. Available: http://www.python.org/
19. J. E. Hopcroft and J. D. Ullman, "Introduction to Automata Theory, Languages and Computation," Addison-Wesley. Reading-Massachusetts. 1979.
20. MaxMind Inc. (2008, Mar.) GeoIP database [Online]. Available: http://www.maxmind.com/
21. P. Wood (2008, Mar.) A libpcap version which supports MMAP mode on linux kernels 2.[46].x. [Online]. Available: http://public.lanl.gov/cpw/
22. A. Zeller, "Isolating cause-effect chains from computer programs," Proc. of ACM SIGSOFT 10th International Symposium on the Foundations of Software Engineering (FSE-10), Nov. 2002.
23. S.T. King, Z.M. Mao, D.G. Lucchetti, and P.M. Chen. "Enriching intrusion alerts through multi-host causality". In Proceedings of The 12th Annual Network and Distributed System Security Symposium (NDSS '05), February 2005.