We use cookies to improve your experience with our site.

一种多元网络流量分析的新方法

A New Approach to Multivariate Network Traffic Analysis

  • 摘要: 网络流量分析是有效网络运行和管理所需的网络监控的核心功能之一。虽然在线流量分析己经被广泛研究,但是它仍然极具挑战性。由于带宽的日益增加,在有限时间内分析如此繁重的流量是主要的挑战之一。有效流量分析的另一个重大挑战是需要支持流量变量的多元功能,以帮助管理员直观地识别计划外的网络事件。为此,我们提出了一种多元分析的新方法,它能提供在线网络流量的高层次的概括。使用此方法,网络的当前状态将显示出由一组流量变量编译所成的模式,并且网络监测中的检测问题(如,变化检测和异常检测),能被简化成一个模式识别和分类问题。本文介绍了我们使用聚类的模式来进行在线、多元网络流量分析的初步成果,以应对我们所发现的挑战和局限。此外,我们提出了一范围基于网络的模型,该模型用于克服聚类的、基于模式的技术的局限性。我们将在技术挑战方面,包括基于流的计算和对异常值的鲁棒性,探讨新模型的潜力。

     

    Abstract: Network traffic analysis is one of the core functions in network monitoring for effective network operations and management. While online traffic analysis has been widely studied, it is still intensively challenging due to several reasons. One of the primary challenges is the heavy volume of traffic to analyze within a finite amount of time due to the increasing network bandwidth. Another important challenge for effective traffic analysis is to support multivariate functions of traffic variables to help administrators identify unexpected network events intuitively. To this end, we propose a new approach with the multivariate analysis that offers a high-level summary of the online network traffic. With this approach, the current state of the network will display patterns compiled from a set of traffic variables, and the detection problems in network monitoring (e.g., change detection and anomaly detection) can be reduced to a pattern identification and classification problem. In this paper, we introduce our preliminary work with clustered patterns for online, multivariate network traffic analysis with the challenges and limitations we observed. We then present a grid-based model that is designed to overcome the limitations of the clustered pattern-based technique. We will discuss the potential of the new model with respect to the technical challenges including streaming-based computation and robustness to outliers.

     

/

返回文章
返回