A Distributed Spatio-Temporal Event Correlation Protocol for Multi-Layer Virtual Networks

Steinert, Rebecca; Gestrelius, S.; Gillblad, Daniel

doi:10.1109/glocom.2011.6133988

Cited by 7 publications

(5 citation statements)

References 20 publications

(25 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Let us move to the upper-left quadrant. It contains highly developed clusters oriented to processing complex events (S. Cheng et al, 2011), the study of failures in multilayer and overlay networks (Steinert et al, 2011), diagnosis of fiber failures (Yuan, C. et al, 2015), and detection of attacks, especially DDoS type (F. Wang et al, 2012).…”

Section: Third Period (2011-2015)mentioning

confidence: 99%

See 1 more Smart Citation

Peripheral Diagnosis for Propagated Network Faults

et al. 2021

View full text Add to dashboard Cite

BACKGROUND:Fault diagnosis techniques have been based on many paradigms, which derive from diverse areas and have different purposes: obtaining a representation model of the network for fault localization, selecting optimal probe sets for monitoring network devices, reducing fault detection time, and detecting faulty components in the network. Although there are several solutions for diagnosing network faults, there are still challenges to be faced: a fault diagnosis solution needs to always be available and able enough to process data timely, because stale results inhibit the quality and speed of informed decision-making. Also, there is no non-invasive technique to continuously diagnose the network symptoms without leaving the system vulnerable to any failures, nor a resilient technique to the network's dynamic changes, which can cause new failures with different symptoms. AIMS:This thesis aims to propose a model for the continuous and timely diagnosis of IP-based networks faults, independent of the network structure, and based on data analytics techniques. METHOD(S):This research's point of departure was the hypothesis of a fault propagation phenomenon that allows the observation of failure symptoms at a higher network level than the fault origin. Thus, for the model's construction, monitoring data was collected from an extensive campus network in which impact link failures were induced at different instants of time and with different duration. These data correspond to widely used parameters in the actual management of a network. The collected data allowed us to understand the faults' behavior and how they are manifested at a peripheral level.Based on this understanding and a data analytics process, the first three modules of our model, named PALADIN, were proposed (Identify, Collection and Structuring), which define the data collection peripherally and the necessary data pre-processing to obtain the description of the network's state at a given moment. These modules give the model the ability to structure the data considering the delays of the multiple responses that the network delivers to a single monitoring probe and the multiple network interfaces that a peripheral device may have. Thus, a structured data stream is obtained, and it is ready to be analyzed. For this analysis, it was necessary to implement an incremental learning framework that respects networks' dynamic nature. It comprises three elements, an incremental learning algorithm, a data rebalancing strategy, and a concept drift detector. This framework is the fourth module of the PALADIN model named Diagnosis.In order to evaluate the PALADIN model, the Diagnosis module was implemented with 25 different incremental algorithms, ADWIN as concept-drift detector and SMOTE (adapted to streaming scenario) as the rebalancing strategy. On the other hand, a dataset was built through the first modules of the PALADIN model (SOFI dataset), which means that these data are the incoming data stream of the Diagnosis module used to evaluate its performance.The PAL...

show abstract

Section: Third Period (2011-2015)mentioning

confidence: 99%

“…The temporal correlation techniques like (Z. and (Steinert et al, 2011) comes up in tackling the dynamic and multilayer nature of networks and correlate internal events for fault localization.…”

Section: Network Fault Diagnosis Techniquesmentioning

confidence: 99%

Peripheral Diagnosis for Propagated Network Faults

et al. 2021

View full text Add to dashboard Cite

show abstract

“…This approach can handle a wide range of dynamic systems, but suffers from the same computational complexity problem as the basic BN framework (i.e., inference in DBNs is NPhard) [40], [66]. Steinert et al [67] have also developed an approach that considers a spatio-temporal correlation between events that are spread across multiple layers in a multi-layer virtual network. This fully distributed approach is based on the assumption that events in one layer may arise from a series of events in lower layers.…”

Section: Efficient Overlay Network Placementmentioning

confidence: 99%

“…Steinert et al [67] have considered spatio-temporal correlation among network events in multi-layer virtual networks. In this work, the problems addressed are related to asynchronous clocks among stacked overlay networks and network equipment, which complicates the problem of event correlation.…”

Section: B Spatio-temporal Event Correlation For Multi-layer Virtualmentioning

confidence: 99%

See 1 more Smart Citation

Recent Advances in Fault Localization in Computer Networks

Dusia

Sethi

2016

IEEE Commun. Surv. Tutorials

View full text Add to dashboard Cite

Fault localization, a core element in network fault management, is the process of inferring the exact failure in a network from the set of observed symptoms. Since faults in network systems can be unavoidable, their quick and accurate detection and diagnosis is important for the stability, consistency, and performance of a communication system. In this paper, we discuss the challenges of fault localization in complex communication systems and present an overview of recent techniques proposed in the literature along with their advantages and limitations. We start by briefly surveying passive monitoring techniques which were previously reviewed in a survey by Steinder [1]. We then describe more recent fault localization research in five categories: active monitoring techniques, techniques for overlay and virtual networks, decentralized probabilistic management techniques, temporal correlation techniques, and learning techniques.

show abstract