FlowBox: Anomaly Detection using Flow Analysis in Cloud Applications

• Tipo: Artigo em Livro de Atas de Conferência Internacional
• Data: 2015

Autores

Fu, SB (Autor) Outra; Kim, H (Autor) Outra; Rui Prior (Autor) FCUP

Ata de Conferência Internacional

Título: 2015 IEEE Global Communications Conference, GLOBECOM 2015, San Diego, CA, USA, December 6-10, 2015

Páginas: 1-6

58th IEEE Global Communications Conference, GLOBECOM 2015

6 December 2015 through 10 December 2015

Indexação

ISI Web of Knowledge - 0 Citações

Scopus - 2 Citações

Outras Informações

ID Authenticus: P-00K-AQ3

DOI: 10.1109/GLOCOM.2014.7417544

Abstract (EN): Many complex application services are deployed in virtualized Cloud environments. Cloud applications consist of multiple components and the data flow among these components tends to be highly complex and unpredictable. The complexity and heterogeneity make anomaly detection challenging. We propose FlowBox, a distributed anomaly detection system for Cloud applications. FlowBox considers each server component as a black box and detects performance anomalies using the flow analysis. The black box model addresses the challenge of accurately describing the complex system model. The flow analysis is based on a simple relationship of data flow in any given component of Cloud applications. Between any two components, the number of requests should always be equal to the number of responses within a given time interval during normal operations. FlowBox monitors traffic flow in each component and continually builds flow signatures in order to describe the normal application behavior. Using the flow signatures, FlowBox detects performance anomalies in Cloud applications. We evaluate FlowBox with several different kinds of Cloud applications in our data center. Experimental results show that FlowBox achieves 96.02% detection precision, 3.98% false positive, and 3.5% false negative in detecting various kinds of anomalies.

Idioma: Inglês

Tipo (Avaliação Docente): Científica

Nº de páginas: 6