11-07-2013 дата публикации
Номер: US20130176852A1
A device used in a network is disclosed. The device includes a network monitor to monitor a network state and to collect statistics for flows going through the network, a flow aggregation unit to aggregate flows into clusters and identify flows that can cause a network problem, and an adaptive control unit to adaptively regulate the identified flow according to network feedback. Other methods and systems also are disclosed. 1. A device used in a network , the device comprising:a network monitor to monitor a network state and to collect statistics for flows going through the network;a flow aggregation unit to aggregate flows into clusters and identify flows that can cause a network problem; andan adaptive control unit to adaptively regulate the identified flow according to network feedback.2. The device as in claim 1 ,{'sup': −', '−', '−, 'sub': 1', '2', 'k, 'wherein the flow aggregation unit defines score S(P)=(max(F)−m(F))/m(F), where a set partition P={F, F, . . . , F}, and m is a low median operator,'}{'sub': 'P', 'finds aggregation that reveals an overloading behavior P*=maxS(P), and'}defines a set of reasonable aggregation rules.3. The device as in claim 2 , wherein the set of aggregation rules are obtained from a past experience or an operator specification.4. The device as in claim 2 , wherein the set of aggregation rules include at least one of:ingress or egress for end-to-end flooding,a source subnet for a compromised virtual machine (VM),a destination subnet for flash crowd to a specific VM,a destination port for attack against a specific service,a list of switches or routers on a path for routing misconfiguration,a start time range for a correlated data transfer,a packet arrival frequency threshold for new traffic load,a duration threshold for a short or failed connection attempt, anda burstiness threshold for buggy customized Transmission Control Protocol (TCP).5. The device as in claim 2 ,wherein at least one of the aggregation rules requires a ...
Подробнее