Project Overview

Recent spates of cyber-attacks and frequent emergence of applications affecting Internet traffic dynamics have made it imperative to develop effective techniques that can extract, and make sense of, significant communication patterns from Internet traffic data for use in network operations and security management. In this project, we present a general methodology for building comprehensive behavior profiles of Internet backbone traffic in terms of communication patterns of end-hosts and services. Relying on data mining and information-theoretic techniques, the methodology consists of significant cluster extraction, automatic behavior classification and structural modelling for in-depth interpretive analyses. We validate our methodology using data sets from the core of the Internet. Our results demonstrate that it indeed can identify common traffic profiles as well as anomalous behavior patterns that are of interest to network operators and security analysts.

Publications

• Kuai Xu, Zhi-Li Zhang and Supratik Bhattacharyya, "Profiling Internet Backbone Traffic: Behavior Models and Applications". In Proceedings of ACM SIGCOMM, Philadelphia, PA, August 2005.
  
  
• Kuai Xu, Zhi-Li Zhang and Supratik Bhattacharyya, "Reducing Unwanted Traffic in a Backbone Network". In Proceedings of USENIX SRUTI Workshop, Cambridge, MA, July 2005.
  
  

Talks

• "Profiling Internet Backbone Traffic: Behavior Models and Applications", ACM SIGCOMM 2005.
  
  
• "Reducing Unwanted Traffic in a Backbone Network", USENIX SRUTI Workshop 2005.
  
  

Software