Advanced Indexing Techniques for Wide-Area Network Monitoring

Abstract— Detecting and unraveling incipient coordinated attacks on Internet resources requires a distributed network monitoring infrastructure. Such an infrastructure will have two logically distinct elements: distributed monitors that continuously collect packet and flow-level information, and a distributed query system that allows network operators to efficiently and rapidly access this information. We argue that, in addition to supporting other types of queries, the network monitoring query system must support multi-dimensional range queries on traffic records (flows, or aggregated flow records). We discuss the design of MIND, a distributed indexing system which supports the creation of multiple distributed indices that use proximal hashing to scalably respond to range queries.

• Type: Conference
• Year: 2005
• Where: ICDE
• Authors: Xin Li, Fang Bian, Hui Zhang 0002, Christophe Diot, Ramesh Govindan, Wei Hong, Gianluca Iannaccone
• Keywords: Database, ICDE 2005, Incipient Coordinated Attacks, Network Monitoring Infrastructure, Range Queries