Human readable network troubleshooting based on anomaly detection and feature scoring
نویسندگان
چکیده
Network troubleshooting is still a heavily human-intensive process. To reduce the time spent by human operators in diagnosis process, we present system based on (i) unsupervised learning methods for detecting anomalies domain, (ii) an attention mechanism to rank features feature space and finally (iii) expert knowledge module able seamlessly incorporate previously collected domain-knowledge. In this paper, thoroughly evaluate performance of full its individual building blocks: particularly, consider 10 anomaly detection algorithms as well mechanisms, that comprehensively represent current state art respective fields. Leveraging unique collection expert-labeled datasets worth several months real router telemetry data, perform thorough evaluation contrasting practical results constrained stream-mode settings, with achievable ideal oracle academic settings. Our experimental shows proposed effective achieving high levels agreement expert, even simple statistical approach extract useful information from gained past cases, significantly improving performance.
منابع مشابه
Troubleshooting with human-readable automated reasoning
In troubleshooting a complex system, hidden dependencies manifest in unexpected ways. We present a methodology for uncovering dependencies between behavior and configuration by exploiting what we call “weak transitive relationships” in the architecture of a system. The user specifies known architectural relationships between components, plus a set of inference rules for discovering new ones. A ...
متن کاملFeature-based anomaly detection
A feature-based approach for detecting anomalies in spectral, spatial, temporal, and other domains is described. When the frequency of occurrence is small relative to the background, anomalies such as man-made objects in natural image backgrounds do not form their own clusters, but are instead assigned the nearest background cluster, becoming an outlier (statistical anomaly) in that cluster. Ou...
متن کاملBehavioral Feature Extraction for Network Anomaly Detection
Early, James P. Ph.D., Purdue University, August, 2005. Behavioral Feature Extraction for Network Anomaly Detection. Major Professors: Carla E. Brodley and Eugene H. Spafford. This dissertation presents an analysis of the features of network traffic commonly used in network-based anomaly detection systems. It is an examination designed to identify how the selection of a particular protocol attr...
متن کاملAutomated Feature Weighting for Network Anomaly Detection
A number of network features is used to describe normal and intrusive traffic patterns. However the choice of features is dependent on which pattern to be detected. In order to identify which network features are more important for a particular network pattern, we propose an automated feature weighting method based on a fuzzy subspace approach to vector quantization modeling that can assign a w...
متن کاملModel-Based Anomaly Detection on Network Services
The key hypothesis to anomaly detection assumes anomalous behaviors are suspicious from a normality point of view. This work provides a new perspective, network service, to model network activity for detecting anomalies. Past models often suffer from lacking of model normality verification, only including particular behavior aspect, and focusing on individual model. To confront them, we propose...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: Computer Networks
سال: 2022
ISSN: ['1872-7069', '1389-1286']
DOI: https://doi.org/10.1016/j.comnet.2022.109447