Anomaly Characterization in Large Scale Networks

Abstract : The context of this work is the online characterization of anomalies in large scale systems. In particular, we address the following question: Given two successive configurations of the system, can we distinguish massive anomalies from isolated ones, the former ones impacting a large number of nodes while the second ones affect solely a small number of them, or even a single one? The rationale of this question is twofold. First, from a theoretical point of view, we characterize anomalies with respect to their neighborhood, and we show that there are anomaly scenarios for which isolated and massive anomalies are indistinguishable from an global observer point of view. We then relax the definition of this problem by introducing \emph{unresolved} configurations, and exhibit necessary and sufficient conditions that allows any node to determine the type of anomaly it has been impacted by. This condition only depends on the close neighborhood of each node and thus is locally computable. We present an algorithm that implements this condition. We show through extensive simulations the performance of our algorithm. From a practical point of view, distinguishing isolated anomalies from massive ones is of utmost importance for networks providers. For instance, regarding Internet service providers that operate millions of home gateways, it would be very interesting to have procedures that allow gateways to self distinguish whether their dysfunction is caused by network-level anomalies or by their own hardware or software, and to notify the service provider only in the latter case.
Document type :
Conference papers
Complete list of metadatas

Cited literature [14 references]  Display  Hide  Download

https://hal.inria.fr/hal-00948135
Contributor : Emmanuelle Anceaume <>
Submitted on : Monday, February 17, 2014 - 6:15:33 PM
Last modification on : Thursday, November 15, 2018 - 11:57:51 AM
Long-term archiving on : Sunday, April 9, 2017 - 1:12:16 PM

File

acp.pdf
Publisher files allowed on an open archive

Identifiers

  • HAL Id : hal-00948135, version 1

Citation

Emmanuelle Anceaume, Yann Busnel, Erwan Le Merrer, Romaric Ludinard, Jean-Louis Marchand, et al.. Anomaly Characterization in Large Scale Networks. 44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), Jun 2014, Atlanta, United States. ⟨hal-00948135⟩

Share

Metrics

Record views

2723

Files downloads

630