Monitoring Systems White Papers
Network Monitoring Using Traffic Dispersion Graphs (TDGs)
Overview Monitoring network traffic and detecting unwanted applications has become a challenging problem, since many applications obfuscate their traffic using unregistered port numbers or payload encryption. Apart from some notable exceptions, most traffic monitoring tools use two types of approaches: keeping traffic statistics such as packet sizes and inter-arrivals, flow counts, byte volumes, etc., or analyzing packet content. This paper proposes the use of Traffic Dispersion Graphs (TDGs) as a way to monitor, analyze, and visualize network traffic. TDGs model the social behavior of hosts ("Who talks to whom"), where the edges can be defined to represent different interactions (e.g. the exchange of a certain number or type of packets).
| Publisher | Association for Computing Machinery | File Format | |
|---|---|---|---|
| Date Published | October 2007 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 0 out of 1 users found this white paper useful
White Paper RSS
Download
Register
