What's new: Finding significant differences in network data streams

Graham Cormode, S. Muthukrishnan

    Research output: Chapter in Book/Report/Conference proceedingConference contribution

    Abstract

    Monitoring and analyzing network traffic usage patterns is vital for managing IP Networks. An important problem is to provide network managers with information about changes in traffic, informing them about "what's new". Specifically, we focus on the challenge of finding significantly large differences in traffic: over time, between interfaces and between routers. We introduce the idea of a deltoid: an item that has a large difference, whether the difference is absolute, relative or variational. We present novel algorithms for finding the most significant deltoids in high speed traffic data, and prove that they use small space, very small time per update, and are guaranteed to find significant deltoids with pre-specified accuracy. In experimental evaluation with real network traffic, our algorithms perform well and recover almost all deltoids. This is the first work to provide solutions capable of working over the data with one pass, at network traffic speeds.

    Original languageEnglish (US)
    Title of host publicationIEEE INFOCOM 2004 - Conference on Computer Communications - Twenty-Third Annual Joint Conference of the IEEE Computer and Communications Societies
    Pages1534-1545
    Number of pages12
    DOIs
    StatePublished - 2004
    EventIEEE INFOCOM 2004 - Conference on Computer Communications - Twenty-Third Annual Joint Conference of the IEEE Computer and Communications Societies - Hongkong, China
    Duration: Mar 7 2004Mar 11 2004

    Publication series

    NameProceedings - IEEE INFOCOM
    Volume3
    ISSN (Print)0743-166X

    Other

    OtherIEEE INFOCOM 2004 - Conference on Computer Communications - Twenty-Third Annual Joint Conference of the IEEE Computer and Communications Societies
    Country/TerritoryChina
    CityHongkong
    Period3/7/043/11/04

    Keywords

    • Network measurements
    • Traffic data analysis

    ASJC Scopus subject areas

    • General Computer Science
    • Electrical and Electronic Engineering

    Fingerprint

    Dive into the research topics of 'What's new: Finding significant differences in network data streams'. Together they form a unique fingerprint.

    Cite this