Monitoring Systems White Papers
Reverse Hashing for High-Speed Network Monitoring: Algorithms, Evaluation, and Applications
Overview A key function for network traffic monitoring and analysis is the ability to perform aggregate queries over multiple data streams. Change detection is an important primitive which can be extended to construct many aggregate queries. The recently proposed sketches are among the very few that can detect heavy changes online for high speed links, and thus support various aggregate queries in both temporal and spatial domains. However, it does not preserve the keys (e.g., source IP address) of flows, making it difficult to reconstruct the desired set of anomalous keys. In an earlier abstract the authors proposed a framework for a reversible sketch data structure that offers hope for efficient extraction of keys.
| Publisher | Northwestern University | File Format | |
|---|---|---|---|
| Date Published | December 2007 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 2 out of 3 users found this white paper useful
White Paper RSS
Download
Register
