DocumentCode
2783784
Title
Joint optimization of monitor location and network anomaly detection
Author
Salhi, Emna ; Lahoud, Samer ; Cousin, Bernard
Author_Institution
ATNET Res. Team, Univ. of Rennes 1, Rennes, France
fYear
2010
fDate
10-14 Oct. 2010
Firstpage
204
Lastpage
207
Abstract
Achieving cost-effective systems for network performance monitoring has been the subject of many research works over the last few years. Most of them adopt a two-step approach. The first step assigns optimal locations to monitors, whereas the second step selects a minimal set of paths to be monitored. However, such an approach does not consider the trade-off between the optimization objectives of each step, and hence may lead to sub-optimal usage of network resources and biased measurements. In this paper, we propose to evaluate and reduce this trade-off. Toward this end, we come up with two ILP formulations for a novel monitoring cost model that apply for both passive and active monitoring. The aim is to jointly minimize the monitor location cost and the anomaly detection cost, thereby obtaining a monitoring solution that minimizes the total monitoring cost. Simulation results illustrate the interplay between the optimization objectives and evaluate the quality of the obtained monitoring solution.
Keywords
computer network security; computerised monitoring; integer programming; linear programming; cost-effective systems; for network performance monitoring; monitor location cost; monitoring cost model; network anomaly detection cost; total monitoring cost; Computational modeling; Delta modulation; Measurement; Monitoring; Network topology; Optimization; Topology;
fLanguage
English
Publisher
ieee
Conference_Titel
Local Computer Networks (LCN), 2010 IEEE 35th Conference on
Conference_Location
Denver, CO
ISSN
0742-1303
Print_ISBN
978-1-4244-8387-7
Type
conf
DOI
10.1109/LCN.2010.5735702
Filename
5735702
Link To Document