Paper Info
Title
Cuckoo bags for exploring multikey data
Abstract
As the transition from IPv4 to hybrid IPv4/IPv6 networks begins, our structures for representing IP addresses for analysis are lagging behind. There is a need for tools that can develop behavioral models of network traffic that include communications patterns among hosts. This work introduces the CuBag data structure and tools for maintaining sets indexed by IPv4 and IPv6 addresses in the same structure. The current tools, rwset and rwbag, in the SiLK tool suite use pointer structures developed for IPv4 but have no support for IPv6 addresses. CuBag keys can contain multiple SiLK record fields, including IPv4 and IPv6 addresses. They use multiple hash functions for key insertion and lookup in constant time. We describe CuBags and illustrate their use with two small case studies.
Year
DOI
Venue
2010
10.1145/1852666.1852687
CSIIRW
Keywords
Field
DocType
pointer structure,cubag data structure,multikey data,ipv6 address,hybrid ipv4,ip address,multiple hash function,cuckoo bag,multiple silk record field,silk tool suite use,ipv6 network,cubag key,network monitoring,indexation,behavior modeling,situational awareness,hash function,data structure,situation awareness
IPv6,Data structure,Pointer (computer programming),Data mining,IPv4,Suite,Computer science,Computer security,IPv6 address,Hash function,Network monitoring
Conference
Citations 
PageRank 
References 
0
0.34
3
Authors
3
Name
Order
Citations
PageRank
John McHugh124425.41
Teryl Taylor2304.87
Jeff Janies3918.24