Detecting network-wide and router-specific misconfigurations through data mining

IEEE/ACM Transactions on Networking

Volumn 17, Issue 1, 2009, Pages 66-79

  Le, Franck ^a   Lee, Sihyung ^a   Wong, Tina ^a   Kim, Hyong S ^a   Newcomb, Darrell ^b  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b Network Operations   (United States)

Author keywords

Association rules mining; Error detection; Network management; Static analysis

Indexed keywords

ASSOCIATION RULES; ASSOCIATIVE PROCESSING; DATA MINING; ERROR DETECTION; INFORMATION MANAGEMENT; INTERNET PROTOCOLS; ROUTERS; ROUTING PROTOCOLS; SECURITY OF DATA; STATIC ANALYSIS;

ASSOCIATION RULES MINING; AUTONOMOUS SYSTEMS; CONFIGURATION FILES; INTERNET CONNECTIVITIES; LOCAL POLICIES; MISCONFIGURATIONS; NETWORK ADMINISTRATORS; NETWORK PROVIDERS; NUMBER OF SERVICES; PERFORMANCE RESEARCHES; ROUTING POLICIES; RULE-BASED APPROACHES; UNIVERSITY CAMPUS;

NETWORK MANAGEMENT;

EID: 61449258341     PISSN: 10636692     EISSN: None     Source Type: Journal    
DOI: 10.1109/TNET.2008.925631     Document Type: Article

References (17)

1. A. Wool, "A quantitative study of firewall configuration errors," IEEE Computer, vol. 37, no. 6, pp. 62-67, Jun. 2004.
2. N. Feamster and H. Balakrishnan, "Detecting BGP configuration faults with static analysis," in Proc. NSDI, Boston, MA, May 2005, online.
3. R. Mahajan, D. Wetherall, and T. Anderson, "Understanding BGP misconfiguration," in Proc. ACM SIGCOMM, Pittsburgh, PA, Aug. 2002, pp. 3-16.
4. B. J. P. Alin, C. Popescu, and T. Underwood, "Anatomy of a leak: AS9121 (or, "How we learned to start worrying and hate maximum prefix limits")," presented at the NANOG34 Meeting, Seattle, WA, May 2005.
5. A. Feldmann and J. Rexford, "IP network configuration for intradomain traffic engineering," IEEE Network, vol. 15, no. 5, pp. 46-57, Sep./Oct. 2001.
6. D. Caldwell, A. Gilbert, J. Gottlieb, A. Greenberg, G. Hjalmtysson, and J. Rexford, "The cutting EDGE of IP router configuration," presented at the ACM SIGCOMM HotNets-II Workshop, Cambridge, MA, Nov. 2003.
7. The Router Audit Tool (RAT). [Online]. Available: http:// www.cisecurity.org/bench cisco.html
8. K. El-Arini and K. Killourhy, "Bayesian detection of router configuration anomalies," presented at the ACM SIGCOMM Workshop on Mining Network Data (MineNet'05), Philadelphia, PA, Aug. 2005.
9. D. Maltz, G. Xie, J. Zhan, H. Zhang, G. Hjalmtysson, and A. Greenberg, "Routing design in operational networks: A look from the inside," in Proc. ACM SIGCOMM, Portland, OR, Aug. 2004, pp. 27-40.
10. "Router Security Configuration Guide System and Network Attack Center" National Security Agency, 2003 [Online]. Available: http://www.nsa.gov/snac/routers/cisco scg-1.1b.pdf
11. G. G. Xie, J. Zhan, D. A. Maltz, H. Zhang, A. Greenberg, G. Hjalmtysson, and J. Rexford, "On static reachability analysis of IP networks," in Proc. IEEE INFOCOM, Miami, FL, May 2005, pp. 2170-2183.
12. R. Agrawal, T. Imielinski, and A. Swami, "Mining association rules between sets of items in large databases," in Proc. ACM SIGMOD Int. Conf. Management of Data, Washington, DC, May 1993, pp. 207-216.
13. T. Uno, M. Kiyomi, and H. Arimura, "LCM ver.2: Efficient mining algorithms for frequent/closed/maximal itemsets," presented at the IEEE Int. Conf. Data Mining (ICDM'04) Workshop on Frequent Itemset Mining Implementations (FIMI'04), Brighton, U.K., Nov. 2004.
14. Common Information Model (CIM) Standards, Distributed Management Task Force, Inc. [Online]. Available: http://www.dmtf.org/standards/cim/
15. Cisco Netsys Connectivity Service Manager. Cisco, San Jose, CA [Online]. Available: www.cisco.com
16. D. Engler, D. Y. Chen, and A. Chou, "Bugs as inconsistent behavior: A general approach to inferring errors in systems code," presented at the 18th ACMSymp. Operating Systems Principles (SOSP'01), Banff, Canada, Oct. 2001.
17. B. Fortz and M. Thorup, "Internet traffic engineering by optimizing OSPF weights," in Proc. IEEE INFOCOM, Tel Aviv, Israel, Mar. 2000, pp. 519-528.