Collaborative Research: NetMine: Finding Patterns in Network Data

合作研究：NetMine：寻找网络数据中的模式

• 批准号: 0208950
• 负责人: Michalis Faloutsos
• 金额: $ 12万
• 依托单位: University of California-Riverside
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2002
• 资助国家: 美国
• 起止时间: 2002-09-01 至 2006-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0208950&HistoricalAwards=false
• 关键词: Collaborative; Research; NetMine; Finding; Patterns

ABSTRACTWhat is the ``typical" traffic of a link? What constitutes ``abnormal" traffic, and therefore warrants an alert for suspicious behavior (intrusion)?How will the Internet look like next year? These are the questions that the project focuses on.It has two major thrusts:The first is to find patterns in the network traffic, and the second is to find trends in the Internet evolution. The technical merit is in the synergy of the networking and data mining fields, pushing the envelope in both:The networking field will enjoy novel insights and fast tools to predict the network performance. The data mining field will benefit from new problemsand new tools (using fractals, power laws, large-graph algorithms), that will be stress-tested on multiple Gigabytes of real, network data. The broader impact of this work will be a novel insight of the network behavior at the micro and macro level. In addition, the work will explore our ability to predict the network behavior and its evolution. As a result, the work will provide new tools to identify abnormal behavior, that could be due to a security breach like a DDoS attack.

摘要链接的``典型''流量是什么？什么构成``异常''流量，因此需要对可疑行为（入侵）发出警报？明年互联网的样子如何？ 这些是该项目关注的问题。它有两个主要的推力：第一个是在网络流量中找到模式，第二个是在Internet演变中找到趋势。技术优点在网络和数据挖掘领域的协同作用中，推动这两者的信封：网络领域将享受新颖的见解和快速工具来预测网络性能。 数据挖掘字段将受益于新的问题和新工具（使用分形，电源法，大图算法），这些工具将在真实网络数据的多个千兆字节上进行压力测试。这项工作的更广泛的影响将是对微观和宏观层面网络行为的新见解。此外，这项工作将探索我们预测网络行为及其演变的能力。结果，这项工作将提供新的工具来识别异常行为，这可能是由于安全漏洞像DDOS攻击一样造成的。