Premium
On‐line detection of persistently high packet‐rate flows via a sliding window scheme with random packet sampling
Author(s) -
Kudo Takanori,
Takine Tetsuya
Publication year - 2013
Publication title -
international journal of network management
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.373
H-Index - 28
eISSN - 1099-1190
pISSN - 1055-7148
DOI - 10.1002/nem.1850
Subject(s) - computer science , sliding window protocol , network packet , sampling (signal processing) , window (computing) , scheme (mathematics) , real time computing , line (geometry) , trace (psycholinguistics) , algorithm , computer network , telecommunications , mathematics , mathematical analysis , linguistics , philosophy , geometry , detector , operating system
SUMMARY We consider on‐line detection of persistently high packet‐rate flows. We assume that flow information is collected via a time‐based sliding window scheme with random packet sampling. In this framework, we propose a method of determining the threshold of the number of sampled packets, which guarantees the false negative ratio. We also formulate and solve the design problem of our scheme, where we aim to minimize the false positive ratio. We then conduct sampling experiments with public trace data and confirm that our method works well as designed. Copyright © 2013 John Wiley & Sons, Ltd.