Visualizing Sparse Internet Events: Network Outages and Route Changes

Visualizing Sparse Internet Events: Network Outages and Route Changes

Quan, Lin and Heidemann, John and Pradkin, Yuri
USC/Information Sciences Institute

Lin Quan, John Heidemann and Yuri Pradkin 2012. Visualizing Sparse Internet Events: Network Outages and Route Changes. Proceedings of the First ACM Workshop on Internet Visualization (Boston, Mass., USA, Nov. 2012).

Abstract

To understand network behavior, researchers and enterprise network operators must interpret large amounts of network data. To understand and manage network events such as outages, route instability, and spam campaigns, they must interpret data that covers a range of networks and evolves over time. We propose a simple clustering algorithm that helps identify spatial clusters of network events based on correlations in event timing, producing 2-D visualizations. We show that these visualizations where they reveal the extent, timing, and dynamics of network outages such as January 2011 Egyptian change of government, and the March 2011 Japanese earthquake. We also show they reveal correlations in routing changes that are hidden from AS-path analysis.

Reference

@inproceedings{Quan12b,
  author = {Quan, Lin and Heidemann, John and Pradkin, Yuri},
  title = {Visualizing Sparse Internet Events: Network Outages and Route Changes},
  booktitle = {Proceedings of the First ACM Workshop on Internet Visualization},
  year = {2012},
  sortdate = {2012-11-01},
  project = {ant, nocredit, lacrend, lander, duoi},
  jsubject = {topology_modeling},
  xpages = {to appear},
  month = nov,
  address = {Boston, Mass., USA},
  publisher = {Springer},
  location = {johnh: pafile},
  keywords = {routing outages, bgp route changes, network visualization},
  url = {http://www.isi.edu/%7ejohnh/PAPERS/Quan12b.html},
  pdfurl = {http://www.isi.edu/%7ejohnh/PAPERS/Quan12b.pdf},
  otherurl = {ftp://ftp.isi.edu/isi-pubs/tr-678b.pdf},
  myorganization = {USC/Information Sciences Institute},
  copyrightholder = {Springer}
}