Title :
Joint optimization of monitor location and network anomaly detection
Author :
Salhi, Emna ; Lahoud, Samer ; Cousin, Bernard
Author_Institution :
ATNET Res. Team, Univ. of Rennes 1, Rennes, France
Abstract :
Achieving cost-effective systems for network performance monitoring has been the subject of many research works over the last few years. Most of them adopt a two-step approach. The first step assigns optimal locations to monitors, whereas the second step selects a minimal set of paths to be monitored. However, such an approach does not consider the trade-off between the optimization objectives of each step, and hence may lead to sub-optimal usage of network resources and biased measurements. In this paper, we propose to evaluate and reduce this trade-off. Toward this end, we come up with two ILP formulations for a novel monitoring cost model that apply for both passive and active monitoring. The aim is to jointly minimize the monitor location cost and the anomaly detection cost, thereby obtaining a monitoring solution that minimizes the total monitoring cost. Simulation results illustrate the interplay between the optimization objectives and evaluate the quality of the obtained monitoring solution.
Keywords :
computer network security; computerised monitoring; integer programming; linear programming; cost-effective systems; for network performance monitoring; monitor location cost; monitoring cost model; network anomaly detection cost; total monitoring cost; Computational modeling; Delta modulation; Measurement; Monitoring; Network topology; Optimization; Topology;
Conference_Titel :
Local Computer Networks (LCN), 2010 IEEE 35th Conference on
Conference_Location :
Denver, CO
Print_ISBN :
978-1-4244-8387-7
DOI :
10.1109/LCN.2010.5735702