Collaborative Research: NetMine: Finding Patterns in Network Data

什么是链路的"典型”流量？什么构成了“异常”流量，因此需要对可疑行为（入侵）发出警报？明年的互联网会是什么样子？ 这些都是该项目关注的问题，它有两大推力：第一是发现网络流量中的模式，第二是发现互联网演进中的趋势。技术优势在于网络和数据挖掘领域的协同作用，推动了两者的发展：网络领域将享受新的见解和快速工具来预测网络性能。 数据挖掘领域将受益于新的问题和新的工具（使用分形，幂律，大图算法），这将是压力测试的多个字节的真实的，网络数据。这项工作的更广泛的影响将是在微观和宏观层面上对网络行为的新见解。此外，这项工作将探索我们预测网络行为及其演变的能力。因此，这项工作将提供新的工具来识别异常行为，这可能是由于DDoS攻击等安全漏洞造成的。

ABSTRACTWhat is the ``typical" traffic of a link? What constitutes ``abnormal" traffic, and therefore warrants an alert for suspicious behavior (intrusion)?How will the Internet look like next year? These are the questions that the project focuses on.It has two major thrusts:The first is to find patterns in the network traffic, and the second is to find trends in the Internet evolution. The technical merit is in the synergy of the networking and data mining fields, pushing the envelope in both:The networking field will enjoy novel insights and fast tools to predict the network performance. The data mining field will benefit from new problemsand new tools (using fractals, power laws, large-graph algorithms), that will be stress-tested on multiple Gigabytes of real, network data. The broader impact of this work will be a novel insight of the network behavior at the micro and macro level. In addition, the work will explore our ability to predict the network behavior and its evolution. As a result, the work will provide new tools to identify abnormal behavior, that could be due to a security breach like a DDoS attack.