Skip to main content
SpringerLink
Log in

An Event Correlation Approach Based on the Combination of IHU and Codebook

  • Conference paper
Computational Intelligence and Security (CIS 2005)

Part of the book series: Lecture Notes in Computer Science ((LNAI,volume 3802))

Included in the following conference series:

Abstract

This paper proposes a new event correlation technique, which integrates the increment hypothesis updating (IHU) technique with the codebook approach. The technique allows multiple simultaneous independent faults to be identified when the system’s codebook only includes the codes of the single fault and lacks the information of prior fault probability and the conditional probability of fault lead to symptoms occur. The method utilizes the refined IHU technique to create and update fault hypotheses that can explain these events, and ranks these hypotheses by the codebook approach. The result of event correlation is the hypothesis with maximum hamming distance to the code of the received events. Simulation shows that this approach can get a high accuracy and a fast speed of correlation even if the network has event loss and spuriousness.

This research is supported in part by Huawei Technologies.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 169.00
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Bouloutas, A.T.: Modeling Fault Management In Communication Networks, in Graduate School of Arts and Sciences, PHD. Columbia University (1990)

    Google Scholar 

  2. Bouloutas, A.T., Calo, S., Finkel, A.: Alarm Correlation and Fault Identification in Communication Networks. IEEE Trans. on Communications 42, 523–533 (1994)

    Article  Google Scholar 

  3. Katzela, I., Schwartz, M.: Schemes for Fault Identification in Communication Networks. IEEE/ACM Trans. on Networking 3, 753–764 (1995)

    Article  Google Scholar 

  4. Steinder, M., Sethi, A.S.: Increasing Robustness of Fault Localization through Analysis of Lost, Spurious, and Positive Symptoms. Presented at INFOCOM 2002, New York (2002)

    Google Scholar 

  5. Steinder, M., Sethi, A.S.: Probabilistic Fault Diagnosis in Communication Systems through Incremental Hypothesis Updating. Computer Networks 45, 537–562 (2004)

    Article  MATH  Google Scholar 

  6. Yemini, S.A., Kliger, S., Mozes, E., Yemini, Y., Ohsie, D.: High Speed and Robust Event Correlation. IEEE Communications Magazine 34, 82–90 (1996)

    Article  Google Scholar 

  7. Liu, G., Mok, A.K., Yang, E.J.: Composite events for network event correlation. In: IM 1999, pp. 247–260 (1999)

    Google Scholar 

  8. Lewis, L.: A Case-Based Reasoning Approach to the Management of Faults in Communication Networks. Presented at INFOCOM 1993, San Francisco (1993)

    Google Scholar 

  9. Kliger, S., Yemini, S., Yemini, Y., Ohsie, D., Stolfo, S.: A coding approach to event correlation. Presented at IM 1995, Santa Barbara, CA (1995)

    Google Scholar 

  10. Steinder, M., Sethi, A.S.: A survey of fault localization techniques in computer networks. Science of Computer Programming 53, 165–194 (2004)

    Article  MATH  MathSciNet  Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Computational Intelligence Research Laboratory, College of Computer Science, Zhejiang University, Hangzhou, Zhejiang Province, P.R. China

    Qiuhua Zheng & Yuntao Qian

  2. State key Laboratory of Information Security, Institute of Software of Chinese Academy of Sciences, Beijing, P.R. China

    Qiuhua Zheng & Yuntao Qian

Authors
  1. Qiuhua Zheng
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Yuntao Qian
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. Microelectronic Instiute, Xidian University, 710071, Xi’an, China

    Yue Hao

  2. Department of Computer Science, Hong Kong Baptist University, Kowloon Tong, Hong Kong

    Jiming Liu

  3. School of Computer Science and Technology, Xidian University, Xi’an, China

    Yu-Ping Wang

  4. Department of Computer Science, Hong Kong Baptist University, Hong Kong,  

    Yiu-ming Cheung

  5. School of Electrical and Electronic Engineering, University of Manchester, UK

    Hujun Yin

  6. Life Science Research Center, School of Electronic Engineering, Xidian University, 710071, Xi’an, Shaanxi, China

    Licheng Jiao

  7. Key Laboratory of Computer Networks and Information Security(Ministry of Education), Xidian University, 710071, Xi’an, China

    Jianfeng Ma

  8. National Laboratory of Antennas and Microwave Technology, Xidian University, 710071, Xi’an, Shanxi, P.R. China

    Yong-Chang Jiao

Rights and permissions

Reprints and permissions

Copyright information

© 2005 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Zheng, Q., Qian, Y. (2005). An Event Correlation Approach Based on the Combination of IHU and Codebook. In: Hao, Y., et al. Computational Intelligence and Security. CIS 2005. Lecture Notes in Computer Science(), vol 3802. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11596981_111

Download citation

  • DOI: https://doi.org/10.1007/11596981_111

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-540-30819-5

  • Online ISBN: 978-3-540-31598-8

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation