skip to main content
OSTI.GOV title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: Impact of Network Activity Levels on the Performance of Passive Network Service Dependency Discovery

Abstract

Network services often do not operate alone, but instead, depend on other services distributed throughout a network to correctly function. If a service fails, is disrupted, or degraded, it is likely to impair other services. The web of dependencies can be surprisingly complex---especially within a large enterprise network---and evolve with time. Acquiring, maintaining, and understanding dependency knowledge is critical for many network management and cyber defense activities. While automation can improve situation awareness for network operators and cyber practitioners, poor detection accuracy reduces their confidence and can complicate their roles. In this paper we rigorously study the effects of network activity levels on the detection accuracy of passive network-based service dependency discovery methods. The accuracy of all except for one method was inversely proportional to network activity levels. Our proposed cross correlation method was particularly robust to the influence of network activity. The proposed experimental treatment will further advance a more scientific evaluation of methods and provide the ability to determine their operational boundaries.

Authors:
; ;
Publication Date:
Research Org.:
Pacific Northwest National Lab. (PNNL), Richland, WA (United States)
Sponsoring Org.:
USDOE
OSTI Identifier:
1259947
Report Number(s):
PNNL-SA-110015
DOE Contract Number:  
AC05-76RL01830
Resource Type:
Conference
Resource Relation:
Conference: IEEE Military Communications Conference (MILCOM 2015), October 26-28, 2015 Tampa, Florida, 1341-1347
Country of Publication:
United States
Language:
English
Subject:
network service dependency discovery; dependency graph; machine learning; correlation

Citation Formats

Carroll, Thomas E., Chikkagoudar, Satish, and Arthur-Durett, Kristine M. Impact of Network Activity Levels on the Performance of Passive Network Service Dependency Discovery. United States: N. p., 2015. Web. doi:10.1109/MILCOM.2015.7357631.
Carroll, Thomas E., Chikkagoudar, Satish, & Arthur-Durett, Kristine M. Impact of Network Activity Levels on the Performance of Passive Network Service Dependency Discovery. United States. https://doi.org/10.1109/MILCOM.2015.7357631
Carroll, Thomas E., Chikkagoudar, Satish, and Arthur-Durett, Kristine M. 2015. "Impact of Network Activity Levels on the Performance of Passive Network Service Dependency Discovery". United States. https://doi.org/10.1109/MILCOM.2015.7357631.
@article{osti_1259947,
title = {Impact of Network Activity Levels on the Performance of Passive Network Service Dependency Discovery},
author = {Carroll, Thomas E. and Chikkagoudar, Satish and Arthur-Durett, Kristine M.},
abstractNote = {Network services often do not operate alone, but instead, depend on other services distributed throughout a network to correctly function. If a service fails, is disrupted, or degraded, it is likely to impair other services. The web of dependencies can be surprisingly complex---especially within a large enterprise network---and evolve with time. Acquiring, maintaining, and understanding dependency knowledge is critical for many network management and cyber defense activities. While automation can improve situation awareness for network operators and cyber practitioners, poor detection accuracy reduces their confidence and can complicate their roles. In this paper we rigorously study the effects of network activity levels on the detection accuracy of passive network-based service dependency discovery methods. The accuracy of all except for one method was inversely proportional to network activity levels. Our proposed cross correlation method was particularly robust to the influence of network activity. The proposed experimental treatment will further advance a more scientific evaluation of methods and provide the ability to determine their operational boundaries.},
doi = {10.1109/MILCOM.2015.7357631},
url = {https://www.osti.gov/biblio/1259947}, journal = {},
number = ,
volume = ,
place = {United States},
year = {Mon Nov 02 00:00:00 EST 2015},
month = {Mon Nov 02 00:00:00 EST 2015}
}

Conference:
Other availability
Please see Document Availability for additional information on obtaining the full-text document. Library patrons may search WorldCat to identify libraries that hold this conference proceeding.

Save / Share: