Title
MIND: A Distributed Multi-Dimensional Indexing System for Network Diagnosis
Abstract
Detecting coordinated attacks on Internet resources requires a distributed network monitoring infrastructure. Such an in- frastructure will have two logically distinct elements: distributed monitors that continuously collect traffic information, and a dis- tributed query system that allows network operators to efficiently correlate information from different monitors in order to detect anomalous traffic patterns. In this paper, we discuss the design and implementation of MIND, a distributed index management system that supports the creation and querying of multiple distributed indices. We validate MIND using traffic traces from two large backbone networks, then examine the performance of a MIND prototype on more than 100 PlanetLab machines. Our experiments show that MIND can detect and report network anomalies in about one second on an inter-continental backbone. We also analyze the efficiency of our load balancing mechanism and evaluate the robustness of MIND to node failure.
Year
DOI
Venue
2006
10.1109/INFOCOM.2006.205
INFOCOM
Keywords
Field
DocType
load balance,robustness,intrusion detection,failure analysis,indexing,face detection,management system,spine,pattern matching,indexation
Load management,Data mining,Multi dimensional,Computer science,Search engine indexing,Real-time computing,Robustness (computer science),Condition monitoring,Face detection,Pattern matching,Intrusion detection system
Conference
ISSN
ISBN
Citations 
0743-166X
1-4244-0221-2
14
PageRank 
References 
Authors
0.74
11
7
Name
Order
Citations
PageRank
Xin Li1151.10
Fang Bian21809.95
Hui Zhang388561002.58
Christophe Diot47831590.69
ramesh govindan5154302144.86
wei66123485.78
Gainluca Iannaccone72140156.52