Combining routing and traffic data for detection of IP forwarding anomalies

Performance Evaluation Review

Volumn 32, Issue 1, 2004, Pages 416-417

  Roughan, Matthew ^a   Griffin, Tim ^b   Mao, Morley ^c   Greenberg, Albert ^d   Freeman, Brian ^d  

^a UNIVERSITY OF ADELAIDE   (Australia)

^b Intel Research Cambridge Lab   (United Kingdom)

^c UNIVERSITY OF MICHIGAN   (United States)

^d AT AND T LABS RESEARCH   (United States)

Author keywords

BGP; Network anomaly detection; Routing; SNMP; Traffic

Indexed keywords

DATA ACQUISITION; LARGE SCALE SYSTEMS; LIGHT AMPLIFIERS; ROBUSTNESS (CONTROL SYSTEMS); ROUTERS; TELECOMMUNICATION TRAFFIC;

BGP; NETWORK ANOMALY DETECTION; ROUTING; SIMPLE NETWORK MANAGEMENT PROTOCOL (SNMP);

NETWORK PROTOCOLS;

EID: 8344219844     PISSN: 01635999     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1012888.1005745     Document Type: Conference Paper

References (11)

1. A.Brown and D. A. Patterson, "To err is human," in Proceedings of the First Workshop on Evaluating and Architecting System dependability (EASY '01), (Gteborg, Sweden), 2001.
2. D. Patterson, A. Brown, P. Broadwell, G. Candea, M. Chen, J. Cutler, P. Enriquez, A. Fox, E. Kiciman, M. Merzbacher, D. Oppenheimer, N. Sastry, W. Tetzlaff, J. Traupman, and N. Treuhaft, "Recovery-oriented computing (roc): Motivation, definition, techniques, and case studies," Tech. Rep. UCB//CSD-02-1175, UC Berkeley Computer Science, 2002.
3. D. Oppenheimer, A. Ganapathi, and D. A. Patterson, "Why do Internet services fail, and what can be done about it?," in 4th Usenix Symposium on Internet Technologies and Systems (USITS'03), 2003.
4. DJ.Houck, K.S.Meier-Hellstern, F.Saheban, and R.A.Skoog, "Failure and congestion propagation through signalling control," in Proceedings of the 14th International Teletraffic Congress (ITC-14) (J. Labetoulle and J. W.Roberts, eds.), vol. 1a, pp. 367-376, Elsevier, 1994.
5. J. Strand, A. Chiu, and R. Tkach, "Issues for routing in the optical layer," IEEE Communications Magazine, February 2001.
6. Nanog mailing list http://www.cctec.com/maillists/nanog/historical/0005/ msg00073.html, 5th May 2000.
7. Nanog mailing list: http://www.cctec.com/maillists/nanog/historical/0210/ msg00058.html, 3rd October 2002.
8. J. D. Brutag, "Aberrant behavior detection and control in time series for network monitoring," in Proceedings of the 14th Systems Administration Conference (LISA 2000), (New Orleans, LA, USA), USENIX, December 2000.
9. M. Roughan, A. Greenberg, C. Kalmanek, M. Rumsewicz, J. Yates, and Y. Zhang, "Experience in measuring Internet backbone traffic variability: Models, metrics, measurements and meaning," in Proceedings of the International Teletraffic Congress (ITC-18), 2003.
10. S. H. Steiner, "Grouped data exponentially weighted moving average control charts." Applied Statistics, vol. 47, no. 2, 1998.
11. P. Barford, J. Kline, D. Plonka, and A. Ron, "A signal analysis of network traffic anomalies," in ACM SIGCOMM Internet Measurement Workshop, (Marseilles, France), November 2002.