On detecting service violations and bandwidth theft in QoS network domains

Authors:
Ahsan Habib;Sonia Fahmy;Srinivas R. Avasarala;Venkatesh Prabhakar;Bharat Bhargava
Affiliations:
CERIAS and Department of Computer Sciences, Purdue University, West Lafayette, IN 47907-1398, USA;CERIAS and Department of Computer Sciences, Purdue University, West Lafayette, IN 47907-1398, USA;CERIAS and Department of Computer Sciences, Purdue University, West Lafayette, IN 47907-1398, USA;CERIAS and Department of Computer Sciences, Purdue University, West Lafayette, IN 47907-1398, USA;CERIAS and Department of Computer Sciences, Purdue University, West Lafayette, IN 47907-1398, USA
Venue:
Computer Communications
Year:
2003

Citing 10
Cited 7

Random early detection gateways for congestion avoidance

IEEE/ACM Transactions on Networking (TON)
Measurements and analysis of end-to-end Internet dynamics

Measurements and analysis of end-to-end Internet dynamics
Resilient overlay networks

SOSP '01 Proceedings of the eighteenth ACM symposium on Operating systems principles
Network tomography on general topologies

SIGMETRICS '02 Proceedings of the 2002 ACM SIGMETRICS international conference on Measurement and modeling of computer systems
Detour: Informed Internet Routing and Transport

IEEE Micro
A scalable monitoring approach for service level agreements validation

ICNP '00 Proceedings of the 2000 International Conference on Network Protocols
SPAND: shared passive network performance discovery

USITS'97 Proceedings of the USENIX Symposium on Internet Technologies and Systems on USENIX Symposium on Internet Technologies and Systems
Multicast-based inference of network-internal loss characteristics

IEEE Transactions on Information Theory
The use of end-to-end multicast measurements for characterizing internal network behavior

IEEE Communications Magazine
Toward efficient monitoring

IEEE Journal on Selected Areas in Communications

Edge-to-edge measurement-based distributed network monitoring

Computer Networks: The International Journal of Computer and Telecommunications Networking
Monitoring and controlling QoS network domains

International Journal of Network Management
Provider selection and task allocation issues in networks with different QoS levels and all you can send pricing

Decision Support Systems
A practical scheme for MPLS fault monitoring and alarm correlation in backbone networks

Computer Networks: The International Journal of Computer and Telecommunications Networking
A table-driven approach for IP traceback based on network statistic analysis

ICACT'09 Proceedings of the 11th international conference on Advanced Communication Technology - Volume 3
SLA-based complementary approach for network intrusion detection

Computer Communications
Service Violation Monitoring Model for Detecting and Tracing Bandwidth Abuse

Journal of Network and Systems Management

Quantified Score

Hi-index	0.24

Visualization

Abstract

We design and evaluate a simple and scalable system to verify quality of service (QoS) in a differentiated services domain. The system uses a distributed edge-to-edge monitoring approach with measurement agents collecting information about delays, losses and throughput, and reporting to a service level agreement monitor (SLAM). The SLAM detects potential service violations, bandwidth theft, denial of service attacks, and flags the need to re-dimension the network domain or limit its users. Measurements may be performed entirely edge-to-edge, or the core routers may participate in logging packet drop information. We compare the core-assisted and edge-to-edge schemes, and we extend network tomography-based loss inference mechanisms to cope with different drop precedences in a QoS network. We also develop a load-based service monitoring scheme which probes the appropriate edge routers for loss and throughput on demand. Simulation results indicate that the system detects attacks with reasonable accuracy, and is useful for damage control in both QoS-enabled and best effort network domains.