DIAMOND: Correlation-based anomaly monitoring daemon for DIME

Ahsan Arefin, Klara Nahrstedt, Raoul Rivas, Jiawei Han, Zixia Huang

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

Distributed Interactive Multimedia Environments (DIMEs) show important dependency constraints between application and underlying system components over time. For example, the video frame rate and the underlying bandwidth usage have a strong performance dependency. Performance dependencies must also be considered among distributed components. These dependencies over a time-span form correlation relationships. Violations of such correlation relationships represent collective anomalies. Users and most specifically DIME application developers face problems of finding (detecting), localizing such anomalies, and adapting against them in real-time. Current practices are to collect joint application-system metadata characterizing behaviors of application and system components while a DIME session is running, and then analyze them offline. Our goal is to provide a framework, called DIAMOND, that allows for real-time and unobtrusive collection and organization of joint application-system metadata in order to assist in finding such correlation violations in the system. DIAMOND works in four steps: (a) real-time metadata collection, (b) metadata processing to allow efficient computation of correlation constraints, (c) metadata distribution for efficient clustering of distributed metadata, and (d) anomaly detection, localization, and evolution monitoring based on violations of correlation relationships. Our results from real implementations and simulations with PlanetLab traces show the effectiveness of DIAMOND in terms of network overhead and anomaly detection time.

Original languageEnglish (US)
Title of host publicationProceedings - 2010 IEEE International Symposium on Multimedia, ISM 2010
Pages137-144
Number of pages8
DOIs
StatePublished - Dec 1 2010
Event2010 IEEE International Symposium on Multimedia, ISM 2010 - Taichung, Taiwan, Province of China
Duration: Dec 13 2010Dec 15 2010

Publication series

NameProceedings - 2010 IEEE International Symposium on Multimedia, ISM 2010

Other

Other2010 IEEE International Symposium on Multimedia, ISM 2010
CountryTaiwan, Province of China
CityTaichung
Period12/13/1012/15/10

ASJC Scopus subject areas

  • Computer Graphics and Computer-Aided Design
  • Human-Computer Interaction

Fingerprint Dive into the research topics of 'DIAMOND: Correlation-based anomaly monitoring daemon for DIME'. Together they form a unique fingerprint.

  • Cite this

    Arefin, A., Nahrstedt, K., Rivas, R., Han, J., & Huang, Z. (2010). DIAMOND: Correlation-based anomaly monitoring daemon for DIME. In Proceedings - 2010 IEEE International Symposium on Multimedia, ISM 2010 (pp. 137-144). [5693833] (Proceedings - 2010 IEEE International Symposium on Multimedia, ISM 2010). https://doi.org/10.1109/ISM.2010.28