Abstract:Traffic pattern characteristics monitoring is useful for abnormal behavior detection and network management. In this paper, we develop a framework for connection degree calculation and measurement in high-speed networks. The bi-directional traffic flow model is employed to aggregate traffic packets, which can reduce the number of flow records and capture user's alternation behavior characteristics. The first order connection degree and joint correlation degree are selected as the features to capture the characteristics of traffic profiles. To perform careful traffic inspection and attack detection, not only the abnormal changes of a single traffic feature but also the correlations between the features are analyzed in the new framework. First, the symmetry of in and out connection degrees is analyzed. And we found that incomplete flows are an important information source for abnormal behavior detection. Second, joint correlation degree can characterize the user's communication profiles and their behavior dynamics, which are employed to perform abnormal detection using measurements based on Renyi cross entropy. Finally, the reversible degree sketch is employed for querying abnormal traffic pattern sources for real-time traffic management. The experimental results based on actual traffic traces collected from Northwest Regional Center of CERNET (China Education and Research Network) show the efficiency of the proposed method. The method based on Renyi entropy can detect abnormal changing points correctly. FNR of the reversible sketch for locating abnormal sources is below 4% and time complexity is constant and less than 4s, which is critical for real-time traffic monitoring.

Estimation of non-stationary network internal loss based on temporal and spatial correlation

Inference of Link Loss Rates by Explicit Estimation

A Fast Method To Estimate Loss Rate

A bottom-up inference of loss rate

Fast Parameter Estimation in Loss Tomography for Networks of General Topology

Loss temporal dependency characteristic inference in wireless sensor network

Spatial-Temporal Congestion Identification Based on Time Series Similarity Considering Missing Data

The Inference of Link Loss Rates with Internal Monitors.

Distributed estimation over complex networks

Distributed TLS over Multitask Networks with Adaptive Intertask Cooperation

Resilient state estimation for time‐varying uncertain dynamical networks with data packet dropouts and switching topology: an event‐triggered method

A network method to identify the dynamic changes of the data flow with spatio-temporal feature

Lossy link identification based on maximum pseudo likelihood estimation

Learning-Based Network Boolean Tomography for Identifying Congested Links with Correlations.

Research on End-to-End Delay Variation Feature Extraction Method for Nonstationary Network

A fast path-based approach to infer link loss rates by explicit estimation

A new connection degree calculation and measurement method for large scale network monitoring.

Simultaneous Topology and Loss Tomography Via a Modified Theme Dictionary Model

Modeling Link Correlation In Low-Power Wireless Networks

A Correlation Information-based Spatiotemporal Network for Traffic Flow Forecasting

Detecting and Locating Nonreciprocal Links Based on the Correlation of Routes in Time Transfer Networks