FlowBox: Anomaly Detection using Flow Analysis in Cloud Applications

• Type: Article in International Conference Proceedings Book
• Date: 2015

Authors

Fu, SB (Author) Other; Kim, H (Author) Other; Rui Prior (Author) FCUP

Conference proceedings International

Title: 2015 IEEE Global Communications Conference, GLOBECOM 2015, San Diego, CA, USA, December 6-10, 2015

Pages: 1-6

58th IEEE Global Communications Conference, GLOBECOM 2015

6 December 2015 through 10 December 2015

Indexing

ISI Web of Knowledge - 0 Citations

Scopus - 2 Citations

Other information

Authenticus ID: P-00K-AQ3

DOI: 10.1109/GLOCOM.2014.7417544

Abstract (EN): Many complex application services are deployed in virtualized Cloud environments. Cloud applications consist of multiple components and the data flow among these components tends to be highly complex and unpredictable. The complexity and heterogeneity make anomaly detection challenging. We propose FlowBox, a distributed anomaly detection system for Cloud applications. FlowBox considers each server component as a black box and detects performance anomalies using the flow analysis. The black box model addresses the challenge of accurately describing the complex system model. The flow analysis is based on a simple relationship of data flow in any given component of Cloud applications. Between any two components, the number of requests should always be equal to the number of responses within a given time interval during normal operations. FlowBox monitors traffic flow in each component and continually builds flow signatures in order to describe the normal application behavior. Using the flow signatures, FlowBox detects performance anomalies in Cloud applications. We evaluate FlowBox with several different kinds of Cloud applications in our data center. Experimental results show that FlowBox achieves 96.02% detection precision, 3.98% false positive, and 3.5% false negative in detecting various kinds of anomalies.

Language: English

Type (Professor's evaluation): Scientific

No. of pages: 6