A real-time network traffic profiling system

Kuai Xu, Feng Wang, Supratik Bhattacharyya, Zhi Li Zhang

Research output: Chapter in Book/Report/Conference proceedingConference contribution

12 Scopus citations

Abstract

This paper presents the design and implementation of a real-time behavior profiling system for high-speed Internet links. The profiling system uses flow-level information from continuous packet or flow monitoring systems, and uses data mining and information-theoretic techniques to automatically discover significant events based on the communication patterns of end-hosts. We demonstrate the operational feasibility of the system by implementing it and performing extensive benchmarking of CPU and memory costs using a variety of packet traces from OC-48 links in an Internet backbone network. To improve the robustness of this system against sudden traffic surges such as those caused by denial of service attacks or worm outbreaks, we propose a simple yet effective filtering algorithm. The proposed algorithm successfully reduces the CPU and memory cost while maintaining high profiling accuracy.

Original languageEnglish (US)
Title of host publicationProceedings - 37th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2007
Pages595-604
Number of pages10
DOIs
StatePublished - Nov 16 2007
Event37th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2007 - Edinburgh, United Kingdom
Duration: Jun 25 2007Jun 28 2007

Publication series

NameProceedings of the International Conference on Dependable Systems and Networks

Other

Other37th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2007
CountryUnited Kingdom
CityEdinburgh
Period6/25/076/28/07

ASJC Scopus subject areas

  • Software
  • Hardware and Architecture
  • Computer Networks and Communications

Fingerprint Dive into the research topics of 'A real-time network traffic profiling system'. Together they form a unique fingerprint.

  • Cite this

    Xu, K., Wang, F., Bhattacharyya, S., & Zhang, Z. L. (2007). A real-time network traffic profiling system. In Proceedings - 37th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2007 (pp. 595-604). [4273010] (Proceedings of the International Conference on Dependable Systems and Networks). https://doi.org/10.1109/DSN.2007.10