Inferring original traffic pattern from sampled flow statistics

Tatsuya Mori*, Ryoich Kawahara, Noriaki Kamiyama, Shigeaki Harada

*この研究の対応する著者

研究成果: Conference contribution

3 被引用数 (Scopus)

抄録

Packet sampling has become a practical and indispensable means to measure flow statistics. Recent studies have demonstrated that analyzing traffic patterns is crucial in detecting network anomalies. We may not be able to infer the original traffic patterns correctly from the sampled flow statistics because sampling process wipes out a lot of information about small flows, which play a vital role in determining the characteristics of traffic patterns. In this paper, we first show an example of how the sampling process wipes out the original statistics using measured data. Then, we show empirical examples indicating that the original traffic pattern cannot be inferred correctly even if we use a statistical inference method for incomplete data, i.e., the EM algorithm, for sampled flow statistics. Finally, we show that additional information about the original flow statistics, the number of unsampled flows, is helpful in tracking the change in original traffic patterns using sampled flow statistics.

本文言語English
ホスト出版物のタイトル2007 International Symposium on Applications and the Internet - Workshops, SAINT-W
DOI
出版ステータスPublished - 2007 12月 1
外部発表はい
イベント2007 International Symposium on Applications and the Internet - Workshops, SAINT-W - Hiroshima, Japan
継続期間: 2007 1月 152007 1月 19

出版物シリーズ

名前SAINT - 2007 International Symposium on Applications and the Internet - Workshops, SAINT-W

Conference

Conference2007 International Symposium on Applications and the Internet - Workshops, SAINT-W
国/地域Japan
CityHiroshima
Period07/1/1507/1/19

ASJC Scopus subject areas

  • コンピュータ ネットワークおよび通信
  • コンピュータ サイエンスの応用
  • ソフトウェア

フィンガープリント

「Inferring original traffic pattern from sampled flow statistics」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル