DocumentCode :
2783784
Title :
Joint optimization of monitor location and network anomaly detection
Author :
Salhi, Emna ; Lahoud, Samer ; Cousin, Bernard
Author_Institution :
ATNET Res. Team, Univ. of Rennes 1, Rennes, France
fYear :
2010
fDate :
10-14 Oct. 2010
Firstpage :
204
Lastpage :
207
Abstract :
Achieving cost-effective systems for network performance monitoring has been the subject of many research works over the last few years. Most of them adopt a two-step approach. The first step assigns optimal locations to monitors, whereas the second step selects a minimal set of paths to be monitored. However, such an approach does not consider the trade-off between the optimization objectives of each step, and hence may lead to sub-optimal usage of network resources and biased measurements. In this paper, we propose to evaluate and reduce this trade-off. Toward this end, we come up with two ILP formulations for a novel monitoring cost model that apply for both passive and active monitoring. The aim is to jointly minimize the monitor location cost and the anomaly detection cost, thereby obtaining a monitoring solution that minimizes the total monitoring cost. Simulation results illustrate the interplay between the optimization objectives and evaluate the quality of the obtained monitoring solution.
Keywords :
computer network security; computerised monitoring; integer programming; linear programming; cost-effective systems; for network performance monitoring; monitor location cost; monitoring cost model; network anomaly detection cost; total monitoring cost; Computational modeling; Delta modulation; Measurement; Monitoring; Network topology; Optimization; Topology;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Local Computer Networks (LCN), 2010 IEEE 35th Conference on
Conference_Location :
Denver, CO
ISSN :
0742-1303
Print_ISBN :
978-1-4244-8387-7
Type :
conf
DOI :
10.1109/LCN.2010.5735702
Filename :
5735702
Link To Document :
بازگشت