Formal Analysis of Passive Measurement Inference Techniques

Jaiswal, Sharad; Iannaccone, Gianluca; Kurose, Jim; Towsley, Don

doi:10.1109/infocom.2006.282

Cited by 4 publications

(4 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The tools "tcpanaly" by Paxton et al [26] and "TCP Behavior Inference Tool" (TBIT) [29] were early attempts at automated diagnosis of TCP implementations and non-compliance issues, using rule based analysis of TCP packet sequences. Work by Jaiswal et al [25,30] on inferring connection characteristics through passive analysis of packet traces used heuristic processes and was later extended to include a more extensive set of rules by Mellia et al [17,31,27].…”

Section: Rule Based Behavior Inference Using Tcp Tracesmentioning

confidence: 99%

Automated Inference System for End-To-End Diagnosis of Network Performance Issues in Client-Terminal Devices

Widanapathirana

Şekercioğlu

Ivanovich

et al. 2012

IJCNC

View full text Add to dashboard Cite

Traditional network diagnosis methods of Client-Terminal Device (CTD) problems tend to be laborintensive, time consuming, and contribute to increased customer dissatisfaction. In this paper, we propose an automated solution for rapidly diagnose the root causes of network performance issues in CTD. Based on a new intelligent inference technique, we create the Intelligent Automated Client Diagnostic (IACD) system, which only relies on collection of Transmission Control Protocol (TCP) packet traces. Using soft-margin Support Vector Machine (SVM) classifiers, the system (i) distinguishes link problems from client problems and (ii) identifies characteristics unique to the specific fault to report the root cause. The modular design of the system enables support for new access link and fault types. Experimental evaluation demonstrated the capability of the IACD system to distinguish between faulty and healthy links and to diagnose the client faults with 98% accuracy. The system can perform fault diagnosis independent of the user's specific TCP implementation, enabling diagnosis of diverse range of client devices.

show abstract

Section: Rule Based Behavior Inference Using Tcp Tracesmentioning

confidence: 99%

Automated Inference System for End-To-End Diagnosis of Network Performance Issues in Client-Terminal Devices

Widanapathirana

Şekercioğlu

Ivanovich

et al. 2012

IJCNC

View full text Add to dashboard Cite

show abstract

“…Also, the effectiveness of the heuristic relies on the estimation of current state and variable values, and if it fails the algorithm behaves the same as random walk. Advanced passive testing techniques [8,10] that estimate data portion more accurately could be applied here to improve the performance.…”

Section: Active Testing -Guided Random Walkmentioning

confidence: 99%

Message Confidentiality Testing of Security Protocols – Passive Monitoring and Active Checking

Shu

Lee

2006

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. Security protocols provide critical services for distributed communication infrastructures. However, it is a challenge to ensure the correct functioning of their implementations, particularly, in the presence of malicious parties. We study testing of message confidentiality -an essential security property. We formally model protocol systems with an intruder using Dolev-Yao model. We discuss both passive monitoring and active testing of message confidentiality. For adaptive testing, we apply a guided random walk that selects next input online based on transition coverage and intruder's knowledge acquisition. For mutation testing, we investigate a class of monotonic security flaws, for which only a small number of mutants need to be tested for a complete checking. The well-known Needham-Schroeder-Lowe protocol is used to illustrate our approaches.

show abstract

“…Such devices are commercially available and have also been described in the research literature (e.g Gigascope [4]). These devices typically rely on information obtained from observed TCP transactions to derive the desired performance metrics [12,16,9]. The two metrics which are typically derived from TCP and which are of interest to us in this work are loss and latency.…”

Section: Introductionmentioning

confidence: 99%

Towards real-time performance monitoring for encrypted traffic

Kharrazi

Sen

Spatscheck

2007

Proceedings of the 2007 SIGCOMM Workshop on Internet Network Management

View full text Add to dashboard Cite

IP networks are increasingly carrying mission-critical applications with robust end-to-end network performance and reliability requirements. Network performance monitoring forms an essential component of critical IP network management functions such as troubleshooting, anomaly detection, and Service-Level-Agreement (SLA) compliance monitoring. However, privacy and security considerations are fueling the use of IP-level encryption techniques such as IPsec, which obscure important transport layer features that existing performance measurement techniques need. New techniques are therefore needed for monitoring performance of encrypted traffic. Towards this goal, in this paper we present a new technique for monitoring round-trip times (RTT) for IP-level encrypted communications. Our approach involves using network-level features like packet size and inter-packet timing to infer specific timing events, and aggregating measurements across short time intervals and related connections to derive final RTT estimates for network paths of interest. Extensive evaluations using traces from an enterprise and a broadband access network, demonstrate that the resulting RTT estimates are quite accurate.

show abstract

Formal Analysis of Passive Measurement Inference Techniques

Cited by 4 publications

References 22 publications

Automated Inference System for End-To-End Diagnosis of Network Performance Issues in Client-Terminal Devices

Automated Inference System for End-To-End Diagnosis of Network Performance Issues in Client-Terminal Devices

Message Confidentiality Testing of Security Protocols – Passive Monitoring and Active Checking

Towards real-time performance monitoring for encrypted traffic

Contact Info

Product

Resources

About