Loading [a11y]/accessibility-menu.js
Identifying High-Cardinality Hosts from Network-Wide Traffic Measurements | IEEE Journals & Magazine | IEEE Xplore

Identifying High-Cardinality Hosts from Network-Wide Traffic Measurements


Abstract:

Host cardinality is defined as the number of distinct peers that a host communicates with in the network. There have been several algorithms proposed to monitor network t...Show More

Abstract:

Host cardinality is defined as the number of distinct peers that a host communicates with in the network. There have been several algorithms proposed to monitor network traffic and identify high-cardinality hosts at a centralized network operation center (NOC). Due to massive amounts of distributed data and limitations on transforming and processing them at the NOC, it is desirable to design mergable and reversible data structures summarizing traffic measurements in a distributed network monitoring system. A mergable data structure summarizes traffic measurements at each local monitor, and these summaries from different monitors can be merged at the NOC, while preserving the error guarantee without increasing space. A reversible data structure can report interested (high-cardinality) hosts efficiently using compressed information without querying every single host in the network. In this paper, we propose a new data streaming algorithm to identify high-cardinality hosts over the network-wide traffic measurements. Our algorithm introduces a new mergable and reversible data structure for the distributed network monitoring system, which is designed by Noisy Group Testing. We have theoretically analyzed our algorithm and evaluated it against real-world data sets.
Published in: IEEE Transactions on Dependable and Secure Computing ( Volume: 13, Issue: 5, 01 Sept.-Oct. 2016)
Page(s): 547 - 558
Date of Publication: 16 April 2015

ISSN Information:

Funding Agency:


Contact IEEE to Subscribe

References

References is not available for this document.