Title
A Traffic Decomposition And Prediction Method For Detecting And Tracing Network-Wide Anomalies
Abstract
Traffic volume anomalies refer to apparently abrupt changes in the time series of traffic volume, which can propagate through the network. Detecting and tracing these anomalies is a critical and difficult task for network operators. In this paper, we first propose a traffic decomposition method, which decomposes the traffic into three components: the trend component, the autoregressive (AR) component, and the noise component. A traffic volume anomaly is detected when the AR component is outside the prediction band for multiple links simultaneously. Then, the anomaly is traced using the projection of the detection result matrices for the observed links which are selected by a shortest-path-first algorithm. Finally, we validate our detection and tracing method by using the real traffic data from the third-generation Science Information Network (SINET3) and show the detected and traced results.
Year
DOI
Venue
2009
10.1587/transinf.E92.D.929
IEICE TRANSACTIONS ON INFORMATION AND SYSTEMS
Keywords
Field
DocType
anomaly detection, anomaly tracing, autoregressive (AR) model, Kalman filter
Autoregressive model,Anomaly detection,Traffic flow,Pattern recognition,Shortest path problem,Computer science,Algorithm,Decomposition method (constraint satisfaction),Kalman filter,Artificial intelligence,Traffic engineering,Tracing
Journal
Volume
Issue
ISSN
E92D
5
1745-1361
Citations 
PageRank 
References 
1
0.36
11
Authors
5
Name
Order
Citations
PageRank
Ping Du1202.52
Shunji Abe26412.41
Yusheng Ji31459162.16
S. Sato421.05
M. Ishiguro531.17