Skip to Main content Skip to Navigation
New interface
Theses

Detection and localization of link-level network anomalies using end-to-end path monitoring

Emna Salhi 1 
1 ATNET - Advanced Technolgy in Networking
IRISA-D2 - RÉSEAUX, TÉLÉCOMMUNICATION ET SERVICES
Abstract : The aim of this thesis is to come up with cost-efficient, accurate and fast schemes for link-level network anomaly detection and localization. It has been established that for detecting all potential link-level anomalies, a set of paths that cover all links of the network must be monitored, whereas for localizing all potential link-level anomalies, a set of paths that can distinguish between all links of the network pairwise must be monitored. Either end-node of each path monitored must be equipped with a monitoring device. Most existing link-level anomaly detection and localization schemes are two-step. The first step selects a minimal set of monitor locations that can detect/localize any link-level anomaly. The second step selects a minimal set of monitoring paths between the selected monitor locations such that all links of the network are covered/distinguishable pairwise. However, such stepwise schemes do not consider the interplay between the conflicting optimization objectives of the two steps, which results in suboptimal consumption of the network resources and biased monitoring measurements. One of the objectives of this thesis is to evaluate and reduce this interplay. To this end, one-step anomaly detection and localization schemes that select monitor locations and paths that are to be monitored jointly are proposed. Furthermore, we demonstrate that the already established condition for anomaly localization is sufficient but not necessary. A necessary and sufficient condition that minimizes the localization cost drastically is established. The problems are demonstrated to be NP-Hard. Scalable and near-optimal heuristic algorithms are proposed.
Document type :
Theses
Complete list of metadata

Cited literature [44 references]  Display  Hide  Download

https://tel.archives-ouvertes.fr/tel-00860397
Contributor : ABES STAR :  Contact
Submitted on : Tuesday, September 10, 2013 - 3:28:26 PM
Last modification on : Tuesday, October 19, 2021 - 11:58:54 PM
Long-term archiving on: : Thursday, December 12, 2013 - 10:21:08 AM

File

SALHI_Emna.pdf
Version validated by the jury (STAR)

Identifiers

  • HAL Id : tel-00860397, version 1

Citation

Emna Salhi. Detection and localization of link-level network anomalies using end-to-end path monitoring. Other [cs.OH]. Université Rennes 1, 2013. English. ⟨NNT : 2013REN1S021⟩. ⟨tel-00860397⟩

Share

Metrics

Record views

310

Files downloads

169