Anomaly detection based on available bandwidth estimation

Proceedings - 2008 IFIP International Conference on Network and Parallel Computing, NPC 2008

Volumn , Issue , 2008, Pages 176-183

  He, Li ^a   Yu, Shunzheng ^a   Li, Min ^a  

^a SUN YAT SEN UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

BANDWIDTH; DATA FLOW ANALYSIS; PARALLEL PROCESSING SYSTEMS; TELECOMMUNICATION SYSTEMS;

ACTIVE PROBING TECHNIQUES; ANOMALY DETECTIONS; AVAILABLE BANDWIDTH ESTIMATIONS; AVAILABLE BANDWIDTHS; END USERS; FLOW DATUMS; NETWORK ACTIVITIES; NETWORK BEHAVIORS; NETWORK OPERATORS; PROBING TECHNIQUES; SINGLE ENDS; TRAFFIC ANOMALIES;

METROPOLITAN AREA NETWORKS;

EID: 57949097090     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NPC.2008.85     Document Type: Conference Paper

References (21)

1. A. Patcha and J. M. Park, "An overview of anomaly detection techniques: Existing solutions and latest technological trends," Computer Networks, vol. 51, no. 12, pp. 3448-3470, 2007.
2. B. Melander, M. Bjorkman, and P. Gunningberg, "Regression-Based Available Bandwidth Measurements," in Proc. SPECTS, San Diego, California, USA, 2002.
3. M. Jain and C. Dovrolis, "End-to-end available band-width: measurement methodology, dynamics, and relation with TCP throughput," IEEE/ACM Transactions on Networking, vol. 11, no. 4, pp. 537-549, 2003.
4. N. Hu and P. Steenkiste, "Evaluation and characterization of available bandwidth probing techniques," IEEE Journal on Selected Areas in Communications, vol. 21, no. 6, pp. 879-894, 2003.
5. V. J. Ribeiro, R. H. Riedi, R. G. Baraniuk, J. Navratil, and L. Cottrell, "pathChirp: Efficient Available Bandwidth Estimation for Network Paths," in Proc. PAM, San Diego, CA, USA., 2003, pp. 200-211.
6. J. Strauss, D. Katabi, and F. Kaashoek, "A measurement study of available bandwidth estimation tools," in Proc. IMC, Miami, Florida, USA, 2003, pp. 39-44.
7. Network characterization service (NCS) [Online]. Available: http://www-didc.lbl.gov/NCS/
8. N. Hu, L. E. Li, Z. M. Mao, P. Steenkiste, and J. Wang, "Locating internet bottlenecks: algorithms, measurements, and implications," in Proc. ACM SIGCOMM, Portland, Oregon, USA, 2004.
9. V. J. Ribeiro, R. H. Riedi, and R. G. Baraniuk, "Spatiotemporal available bandwidth estimation with STAB," IEEE Internet Computing Magazine, vol. 8, no. 5, pp. 34-41, 2004.
10. A. Akella, S. Seshan, and A. Shaikh, "An empirical evaluation of wide-area internet bottlenecks," in Proc. IMC, Miami Beach, FL, USA, 2003, pp. 101-114.
11. K. Lai and M. Baker, "Measuring link bandwidths using a deterministic model of packet delay," in Proc. ACM SIGCOMM, Stockholm, Sweden, 2000, pp. 283-294.
12. A. Pasztor and D. Veitch, "Active probing using packet quartets," in Proc. IMC, Marseille, France, 2002, pp. 293-305.
13. K. Harfoush, A. Bestavros, and J. Byers, "Measuring bottleneck bandwidth of targeted path segments," in Proc. IEEE INFOCOM, San Francisco, California, USA, 2003, vol. 3, pp. 2079-2089.
14. X. Liu, K. Ravindran, and D. Loguinov, "A Queueing-Theoretic Foundation of Available Bandwidth Estimation: Single-Hop Analysis," Networking, IEEE/ACM Transactions on, vol. 15, no. 4, pp. 918-931, 2007.
15. R. Govindan and V. Paxson, "Estimating router ICMP generation delays," in Proc. Passive & Active Measurement (PAM), Fort Collins, Colorado, USA, 2002.
16. K. G. Anagnostakis, M. Greenwald, and R. S. Ryger, "cing: measuring network-internal delays using only existing infrastructure," in Proc. IEEE INFOCOM, San Francisco, California, USA, 2003, vol. 3, pp. 2112-2121.
17. RFC 792 [Online]. Available: Internet control message protocol, September 1981.
18. Ns2: Network Simulator [Online]. Available: http://nsnam.isi.edu/nsnam/ index.php/Main_Page
19. MAWI [Online]. Available: http://tracer.csl.sony.co.jp/mawi/
20. R. Carter and M. Crovella, "Measuring Bottleneck Link Speed in Packet-Switched Networks," Performance Evaluation, vol. 27-28, pp. 297-318, 1996.
21. C. Dovrolis, P. Ramanathan, and D. Moore, "What do packet dispersion techniques measure?," in Proc. IEEE INFOCOM, Anchorage, Alaska, USA, 2001, pp. 905-914.