Traffic Monitoring and Analysis : Second International Workshop, TMA 2010, Zurich, Switzerland, April 7, 2010. Proceedings

by Ricciato, Fabio; Mellia, Marco; Biersack, Ernst

• ISBN13: 9783642123641
• ISBN10: 3642123643
• Format: Paperback
• Copyright: 2010-04-15
• Publisher: Springer-Verlag New York Inc

Summary

This book constitutes the proceedings of the Second InternationalWorkshop on Traffic Monitoring and Analysis, TMA 2010, held in Zurich,Switzerland, on April 7, 2010 - colocated with PAM 2010, the 11thPassive and Active Measurement conference. The workshop is an initiativefrom the COST Action IC0703 "Data Traffic Monitoring and Analysis:Theory, Techniques, Tools and Applications for the Future Networks".The 14 papers contained in this volume were carefully reviewed andselected from 34 submissions. They encompass research areas related totraffic analysis and classification, measurements, topology, discovery,detection of specific applications and events, packet inspection, andtraffic inference. The papers are organized in topical sections onanalysis of internet datasets, tools for traffic analysis andmonitoring, traffic classification, and performance measurements.

Table of Contents

Analysis of Internet Datasets
Understanding and Preparing for DNS Evolution	p. 1
Characterizing Traffic Flows Originating from Large-Scale Video Sharing Services	p. 17
Mixing Biases: Structural Changes in the AS Topology Evolution	p. 32
Tools for Traffic Analysis and Monitoring
EmPath: Tool to Emulate Packet Transfer Characteristics in IP Network	p. 46
A Database of Anomalous Traffic for Assessing Profile Based IDS	p. 59
Collection and Exploration of Large Data Monitoring Sets Using Bitmap Databases	p. 73
DeSRTO: An Effective Algorithm for SRTO Detection in TCP Connections	p. 87
Traffic Classification
Uncovering Relations between Traffic Classifiers and Anomaly Detectors via Graph Theory	p. 101
Kiss to Abacus: A Comparison of P2P-TV Traffic Classifiers	p. 115
TCP Traffic Classification Using Markov Models	p. 127
K-Dimensional Trees for Continuous Traffic Classification	p. 141
Performance Measurements
Validation and Improvement of the Lossy Difference Aggregator to Measure Packet Delays	p. 155
End-to-End Available Bandwidth Estimation Tools, an Experimental Comparison	p. 171
On the Use of TCP Passive Measurements for Anomaly Detection: A Case Study from an Operational 3G Network	p. 183
Author Index	p. 199
Table of Contents provided by Ingram. All Rights Reserved.