kth.sePublications
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Adative correlation time window
KTH, School of Information and Communication Technology (ICT).
2013 (English)Independent thesis Advanced level (degree of Master (Two Years)), 20 credits / 30 HE creditsStudent thesis
Abstract [en]

Event correlation plays a key role in network management. It is the ability in networkmanagement systems to co-relate events by reading into event attributes and extractingmeaningful information that has value to network operators. It is a conceptual interpretation ofmultiple events such that a new meaning is assigned to these events. This interpretation is usedto pinpoint the events that are behind a root cause incident. The root cause could be a faultynode or an underperforming link. Understanding correlation patterns can potentially helpidentify and localize the root cause of a problem in a network so that network operators takenecessary actions to issue restoration operations.

An important technique used by event correlators is temporal correlation of events,whereby events closely related in time with each other are correlated. This technique uses acorrelation time window as an interval in time to capture and correlate events. Traditionally,event correlators have used a fixed-sized correlation time window to perform event correlationin which the size of the correlation time window is fixed. However, this does not scale properlyin modern networks where dynamic relationships are commonplace. To address this issue, thisthesis presents and discusses the idea of an adaptive correlation time window, whereby thewindow size is dynamically calculated based on observable network conditions and processingtimes. The aim of the investigation is to explore the performance of an adaptive window inseveral network scenarios and, more importantly, to compare both types of windows in termsof their performance. To do this, several experiments were designed and performed on avirtualized network test bed. The results of such experiments demonstrate that the adaptivecorrelation time window adequately adapts to varying network conditions. The investigationalso shows the conditions that need to be fulfilled in order to observe a better performance ofeither type of window.

Place, publisher, year, edition, pages
2013. , p. 86
Series
Trita-ICT-EX ; 2012:225
National Category
Engineering and Technology
Identifiers
URN: urn:nbn:se:kth:diva-121290OAI: oai:DiVA.org:kth-121290DiVA, id: diva2:618055
Educational program
Master of Science -Communication Systems
Uppsok
Technology
Examiners
Available from: 2013-04-25 Created: 2013-04-25 Last updated: 2022-06-24Bibliographically approved

Open Access in DiVA

fulltext(1308 kB)712 downloads
File information
File name FULLTEXT01.pdfFile size 1308 kBChecksum SHA-512
74b063f6ef6128ba7cadc9384cf7b5b5b5cb368ccd6325d40ea512725915217bdcce28907ba05745e2737e1fc89235466cf3f81309ffd28b7bacfb0964faa7fa
Type fulltextMimetype application/pdf

By organisation
School of Information and Communication Technology (ICT)
Engineering and Technology

Search outside of DiVA

GoogleGoogle Scholar
Total: 712 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

urn-nbn

Altmetric score

urn-nbn
Total: 166 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf