Network self-protection

摘要

A device used in a network is disclosed. The device includes a network monitor to monitor a network state and to collect statistics for flows going through the network, a flow aggregation unit to aggregate flows into clusters and identify flows that can cause a network problem, and an adaptive control unit to adaptively regulate the identified flow according to network feedback. Other methods and systems also are disclosed.

主权项

1. A method used in a network, the method comprising:
monitoring a network state and to collect statistics for flows going through the network; aggregating flows into clusters and identify flows that can cause a network problem; and adaptively regulating the identified flow according to network feedback, wherein the flow aggregation comprises: defining score S(P)=max(F)−m−(F)=m−(F), where S is the score to measure significance of overloading flows, P is an aggregation rule and a set partition {F1, F2, . . . , Fk}, F is one of F1, F2, . . . , and Fk, and m−is a low median operator; finding an aggregation rule that reveals an overloading behavior P*=maxPS(P), where P* is the aggregation rule that reveals the overloading behavior; and defining a set of aggregation rules.