Network anomography

Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC

Volumn , Issue , 2005, Pages 317-330

  Zhang, Yin ^a   Ge, Zihui ^b   Greenberg, Albert ^b   Roughan, Matthew ^c  

^a University of Texas at Austin   (United States)

^b AT AND T LABS RESEARCH   (United States)

^c UNIVERSITY OF ADELAIDE   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION; ARIMA MODELING; FALSE NEGATIVES; FALSE POSITIVE; HIGH ROBUSTNESS; NOVEL ALGORITHM; PERFORMANCE DEGRADATION; PRESENCE OF MEASUREMENT NOISE;

INFERENCE ENGINES; PRINCIPAL COMPONENT ANALYSIS;

ALGORITHMS;

EID: 84878704906     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (35)

1. P. Barford, J. Kline, D. Plonka, and A. Ron. A signal analysis of network traffic anomalies. In ACM Internet Measurement Workshop, Nov. 2002.
2. G. E. P. Box, G. M. Jenkins, and G. C. Reinsel. Time Series Analysis, Forecasting and Control. Prentice-Hall, Engle-wood Cliffs, 1994.
3. P. J. Brockwell and R. A. Davis. Introduction to Time Series and Forecasting. Springer-Varlang, 2nd edition, 2002.
4. J. D. Brutag. Aberrant behavior detection and control in time series for network monitoring. In 14th Systems Administration Conference (LISA 2000), Dec. 2000.
5. J. Cao, D. Davis, S. V. Wiel, and B. Yu. Time-varying network tomography. J. Amer. Statist. Assoc, 95(452):1063-1075, 2000.
6. I. Daubechies. Orthonormal bases of compactly supported wavelets. Communications on Pure and Applied Mathematics, 41:909-996, 1988.
7. I. Daubechies. Ten Lectures on Wavelets, volume 41 of CBMS-NSF Regional Conference Series in Applied Mathematics. SIAM, 1992.
8. D. L. Donoho. For most large underdetermined systems of equations, the minimal l1-norm near-solution approximates the sparsest near-solution, Aug. 2004. http://www-stat.stanford.edu/~donoho/Reports/.
9. D. L. Donoho. For most large underdetermined systems of equations, the minimal l1-norm solution is also the sparsest solution, Sept. 2004. http://www-stat.stanford.edu/~donoho/Reports/.
10. A. Feldmann, A. Greenberg, C. Lund, N. Reingold, and J. Rexford. Netscope: Traffic engineering for IP networks. IEEE Network Magazine, pages 11-19, Mar./Apr. 2000.
11. A. Feldmann, A. Greenberg, C. Lund, N. Reingold, J. Rex-ford, and F. True. Deriving traffic demands for operational IP networks: Methodology and experience. IEEE/ACM Transactions on Networking, 9(3):265-279, 2001.
12. A. Graps. Amara's wavelet page, 2004. http://www.amara.com/current/ wavelet.html.
13. M. Grossglauser, N. Koudas, Y. Park, and A. Variot. FALCON: Fault management via alarm warehousing and mining. In NRDM 2001 Workshop, May 2001.
14. A. Gunnar, M. Johansson, and T. Telkamp. Traffic matrix estimation on a large IP backbone: A comparison on real data. In ACM Internet Measurement Conference, Oct. 2004.
15. C. Hood and C. Ji. Proactive network fault detection. IEEE Trans. Reliability, 46(3):333-341, 1997.
16. Katzela and Schwartz. Schemes for fault identification in communication networks. IEEE/ACM Transactions on Networking, 3(6):753-764, 1995.
17. B. Krishnamurthy, S. Sen, Y. Zhang, and Y. Chen. Sketch-based change detection: Methods, evaluation, and applications. In ACM Internet Measurement Conference, Oct. 2003.
18. A. Lakhina, M. Crovella, and C. Diot. Characterization of network-wide anomalies in traffic flows. In ACM Internet Measurement Conference, Oct. 2004.
19. A. Lakhina, M. Crovella, and C. Diot. Diagnosing network-wide traffic anomalies. In ACM SIGCOMM, Aug. 2004.
20. A. Lakhina, K. Papagiannaki, C. D. Mark Crovella, E. D. Kolaczyk, and N. Taft. Structural analysis of network traffic flows. In ACM SIGMETRICS, 2004.
21. S. Mallat. A Wavelet Tour of Signal Processing. Academic Press, San Diego, 2nd edition, 2001.
22. A. Medina, N. Taft, K. Salamatian, S. Bhattacharyya, and C. Diot. Traffic matrix estimation: Existing techniques and new directions. In ACM SIGCOMM, Aug. 2002.
23. A. Nucci, R. Cruz, N. Taft, and C. Diot. Design of IGP link weights for estimation of traffic matrices. In IEEE Infocom, Mar. 2004.
24. Y. C. Pati, R. Rezaiifar, and P. S. Krishnaprasad. Orthogonal matching pursuit: Recursive function approximation with applications to wavelet decomposition. In 27th Annual Asilomar Conference on Signals, Systems, and Computers, 1993.
25. M. Roughan, T. Griffin, M. Mao, A. Greenberg, and B. Freeman. IP forwarding anomalies and improving their detection using multiple data sources. In ACM SIGCOMM Workshop on Network Troubleshooting, pages 307-312, Sept. 2004.
26. SAS 9 online document. Equations for the smoothing models, Jan. 2004. http://support.sas.com/91doc/getDoc/hpfug.hlp/hpfdet-sect7.htm.
27. A. Shaikh, C. Isett, A. Greenberg, M. Roughan, and J. Gottlieb. A case study of OSPF behavior in a large enterprise network. In ACM Internet Measurement Workshop, 2002.
28. C. Tebaldi and M. West. Bayesian inference on network traffic using link count data. J. Amer. Statist. Assoc, 93(442):557-576, 1998.
29. R. Teixeira, N. Duffield, J. Rexford, and M. Roughan. Traffic matrix reloaded: Impact of routing changes renata teix-eira. In Workshop on Passive and Active Measurements (PAM), 2005.
30. M. Thottan and C. Ji. Proactive anomaly detection using distributed intelligent agents. IEEE Network, Sept/Oct 1998.
31. Y. Vardi. Network tomography: estimating source-destination traffic intensities from link data. J. Amer. Statist. Assoc., 91(433):365-377, 1996.
32. A. Ward, P. Glynn, and K. Richardson. Internet service performance failure detection. ACM SIGMETRICS Performance Evaluation Review archive, 26(3):38-43, Dec. 1998.
33. Y. Zhang, Z. Ge, A. Greenberg, and M. Roughan. Network anomography. UT-Austin Technical Report, 2005. http://www.cs.utexas.edu/~yzhang/papers/.
34. Y. Zhang, M. Roughan, N. Duffield, and A. Greenberg. Fast accurate computation of large-scale ip traffic matrices from link loads. In ACM SIGMETRICS, June 2003.
35. Y. Zhang, M. Roughan, C. Lund, and D. Donoho. An information-theoretic approach to traffic matrix estimation. In ACM SIGCOMM, Aug. 2003.