A New Approach to Multivariate Network Traffic Analysis.

Saved in:
Bibliographic Details
Title: A New Approach to Multivariate Network Traffic Analysis.
Authors: Kim, Jinoh1,2 (AUTHOR) jinoh.kim@tamuc.edu, Sim, Alex2 (AUTHOR) asim@lbl.gov
Source: Journal of Computer Science & Technology (10009000). Mar2019, Vol. 34 Issue 2, p388-402. 15p.
Subjects: Anomaly detection (Computer security), Internet traffic, Multivariate analysis, Operations management, Computer network management
Abstract: Network traffic analysis is one of the core functions in network monitoring for effective network operations and management. While online traffic analysis has been widely studied, it is still intensively challenging due to several reasons. One of the primary challenges is the heavy volume of traffic to analyze within a finite amount of time due to the increasing network bandwidth. Another important challenge for effective traffic analysis is to support multivariate functions of traffic variables to help administrators identify unexpected network events intuitively. To this end, we propose a new approach with the multivariate analysis that offers a high-level summary of the online network traffic. With this approach, the current state of the network will display patterns compiled from a set of traffic variables, and the detection problems in network monitoring (e.g., change detection and anomaly detection) can be reduced to a pattern identification and classification problem. In this paper, we introduce our preliminary work with clustered patterns for online, multivariate network traffic analysis with the challenges and limitations we observed. We then present a grid-based model that is designed to overcome the limitations of the clustered pattern-based technique. We will discuss the potential of the new model with respect to the technical challenges including streaming-based computation and robustness to outliers. [ABSTRACT FROM AUTHOR]
Copyright of Journal of Computer Science & Technology (10009000) is the property of Springer Nature and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database: Engineering Source
FullText Text:
  Availability: 0
Header DbId: egs
DbLabel: Engineering Source
An: 135580598
AccessLevel: 6
PubType: Academic Journal
PubTypeId: academicJournal
PreciseRelevancyScore: 0
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: A New Approach to Multivariate Network Traffic Analysis.
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22Kim%2C+Jinoh%22">Kim, Jinoh</searchLink><relatesTo>1,2</relatesTo> (AUTHOR)<i> jinoh.kim@tamuc.edu</i><br /><searchLink fieldCode="AR" term="%22Sim%2C+Alex%22">Sim, Alex</searchLink><relatesTo>2</relatesTo> (AUTHOR)<i> asim@lbl.gov</i>
– Name: TitleSource
  Label: Source
  Group: Src
  Data: <searchLink fieldCode="JN" term="%22Journal+of+Computer+Science+%26+Technology+%2810009000%29%22">Journal of Computer Science & Technology (10009000)</searchLink>. Mar2019, Vol. 34 Issue 2, p388-402. 15p.
– Name: Subject
  Label: Subjects
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Anomaly+detection+%28Computer+security%29%22">Anomaly detection (Computer security)</searchLink><br /><searchLink fieldCode="DE" term="%22Internet+traffic%22">Internet traffic</searchLink><br /><searchLink fieldCode="DE" term="%22Multivariate+analysis%22">Multivariate analysis</searchLink><br /><searchLink fieldCode="DE" term="%22Operations+management%22">Operations management</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+network+management%22">Computer network management</searchLink>
– Name: Abstract
  Label: Abstract
  Group: Ab
  Data: Network traffic analysis is one of the core functions in network monitoring for effective network operations and management. While online traffic analysis has been widely studied, it is still intensively challenging due to several reasons. One of the primary challenges is the heavy volume of traffic to analyze within a finite amount of time due to the increasing network bandwidth. Another important challenge for effective traffic analysis is to support multivariate functions of traffic variables to help administrators identify unexpected network events intuitively. To this end, we propose a new approach with the multivariate analysis that offers a high-level summary of the online network traffic. With this approach, the current state of the network will display patterns compiled from a set of traffic variables, and the detection problems in network monitoring (e.g., change detection and anomaly detection) can be reduced to a pattern identification and classification problem. In this paper, we introduce our preliminary work with clustered patterns for online, multivariate network traffic analysis with the challenges and limitations we observed. We then present a grid-based model that is designed to overcome the limitations of the clustered pattern-based technique. We will discuss the potential of the new model with respect to the technical challenges including streaming-based computation and robustness to outliers. [ABSTRACT FROM AUTHOR]
– Name: AbstractSuppliedCopyright
  Label:
  Group: Ab
  Data: <i>Copyright of Journal of Computer Science & Technology (10009000) is the property of Springer Nature and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.)
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=135580598
RecordInfo BibRecord:
  BibEntity:
    Identifiers:
      – Type: doi
        Value: 10.1007/s11390-019-1915-y
    Languages:
      – Code: eng
        Text: English
    PhysicalDescription:
      Pagination:
        PageCount: 15
        StartPage: 388
    Subjects:
      – SubjectFull: Anomaly detection (Computer security)
        Type: general
      – SubjectFull: Internet traffic
        Type: general
      – SubjectFull: Multivariate analysis
        Type: general
      – SubjectFull: Operations management
        Type: general
      – SubjectFull: Computer network management
        Type: general
    Titles:
      – TitleFull: A New Approach to Multivariate Network Traffic Analysis.
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: Kim, Jinoh
      – PersonEntity:
          Name:
            NameFull: Sim, Alex
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 01
              M: 03
              Text: Mar2019
              Type: published
              Y: 2019
          Identifiers:
            – Type: issn-print
              Value: 10009000
          Numbering:
            – Type: volume
              Value: 34
            – Type: issue
              Value: 2
          Titles:
            – TitleFull: Journal of Computer Science & Technology (10009000)
              Type: main
ResultId 1