URCA: Pulling out anomalies by their root causes

Proceedings - IEEE INFOCOM

Volumn , Issue , 2010, Pages

  Silveira, Fernando ^a   Diot, Christophe ^b  

^a SORBONNE UNIVERSITÉ   (France)

^b NONE

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION METHODS; DDOS ATTACK; PULLING OUT; ROOT CAUSE; ROOT CAUSE ANALYSIS; TRAFFIC ANOMALIES;

EID: 77953306333     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOM.2010.5462151     Document Type: Conference Paper

References (19)

1. P. Barford, J. Kline, D. Plonka, and A. Ron, "A signal analysis of network traffic anomalies," in Proceedings of IMW, November 2002, pp. 71-82.
2. B. Krishnamurthy, S. Sen, Y. Zhang, and Y. Chen, "Sketch-based change detection: methods, evaluation, and applications," in Proceedings of IMC, October 2003, pp. 234-247.
3. A. Lakhina, M. Crovella, and C. Diot, "Diagnosing network-wide traffic anomalies," in Proceedings of SIGCOMM, August 2004, pp. 219-230.
4. -, "Mining anomalies using traffic feature distributions," in Proceedings of SIGCOMM, August 2005, pp. 217-228.
5. A. Soule, K. Salamatian, and N. Taft, "Combining filtering and statistical methods for anomaly detection," in Proceedings of IMC, October 2005, pp. 331-344.
6. X. Li, F. Bian, M. Crovella, C. Diot, R. Govindan, G. Iannaccone, and A. Lakhina, "Detection and identification of network anomalies using sketch subspaces," in Proceedings of IMC, October 2006, pp. 147-152.
7. G. Nychis, V. Sekar, D. G. Andersen, H. Kim, and H. Zhang, "An empirical evaluation of entropy-based anomaly detection," in Proceedings of IMC, October 2008, pp. 151-156.
8. F. Silveira, C. Diot, N. Taft, and R. Govindan, "Detecting correlated anomalous flows," Thomson, Tech. Rep. CR-PRL-2009-02-0001, 2009.
9. P. J. Brockwell and R. A. Davis, Introduction to Time Series and Forecasting. Springer, 2002.
10. X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. F. Wu, and L. Zhang, "An analysis of BGP multiple origin AS (MOAS) conflicts," in Proceedings of IMW, 2001, pp. 31-35.
11. T. Karagiannis, K. Papagiannaki, and M. Faloutsos, "BLINC: multilevel traffic classification in the dark," in Proceedings of SIGCOMM, August 2005, pp. 229-240.
12. A. K. Jain, M. N. Murty, and P. J. Flynn, "Data clustering: a review," ACM Computing Surveys, vol. 31, no. 3, pp. 264-323, 1999.
13. I. Cunha, F. Silveira, R. Oliveira, R. Teixeira, and C. Diot, "Uncovering artifacts of flow measurement tools," in Proceedings of PAM, April 2009.
14. C. Estan, S. Savage, and G. Varghese, "Automatically inferring patterns of resource consumption in network traffic," in Proceedings of SIGCOMM, August 2003, pp. 137-148.
15. Y. Zhang, S. Singh, S. Sen, N. Duffield, and C. Lund, "Online identification of hierarchical heavy hitters: algorithms, evaluation, and applications," in Proceedings of IMC, October 2004, pp. 101-114.
16. G. Cormode, F. Korn, S. Muthukrishnan, and D. Srivastava, "Diamond in the rough: finding hierarchical heavy hitters in multi-dimensional data," in Proceedings of SIGMOD, 2004, pp. 155-166.
17. M. Caesar, L. Subramanian, and R. H. Katz, "Towards localizing root causes of BGP dynamics," UC Berkeley, Tech. Rep., 2003.
18. A. Feldmann, O. Maennel, Z. M. Mao, A. Berger, and B. Maggs, "Locating Internet routing instabilities," SIGCOMM Computer Communication Review, vol. 34, no. 4, pp. 205-218, 2004.
19. R. Teixeira and J. Rexford, "A measurement framework for pin-pointing routing changes," in Proceedings of NetT, September 2004, pp. 313-318.