Sciweavers

Share
DSN
2007
IEEE

A Real-Time Network Traffic Profiling System

9 years 2 months ago
A Real-Time Network Traffic Profiling System
This paper presents the design and implementation of a real-time behavior profiling system for high-speed Internet links. The profiling system uses flow-level information from continuous packet or flow monitoring systems, and uses data mining and information-theoretic techniques to automatically discover significant events based on the communication patterns of end-hosts. We demonstrate the operational feasibility of the system by implementing it and performing extensive benchmarking of CPU and memory costs using a variety of packet traces from OC-48 links in an Internet backbone network. To improve the robustness of this system against sudden traffic surges such as those caused by denial of service attacks or worm outbreaks, we propose a simple yet effective filtering algorithm. The proposed algorithm successfully reduces the CPU and memory cost while maintaining high profiling accuracy.
Kuai Xu, Feng Wang 0002, Supratik Bhattacharyya, Z
Added 14 Aug 2010
Updated 14 Aug 2010
Type Conference
Year 2007
Where DSN
Authors Kuai Xu, Feng Wang 0002, Supratik Bhattacharyya, Zhi-Li Zhang
Comments (0)
books