Research on Network Configuration Verification Based on Association Analysis
Article No.: 17, Pages 1 - 6
Abstract
This paper studies the application of association analysis in the scenario of massive network configuration verification, and puts forward a kind of network configuration anomaly detection method and system based on association analysis. We creatively use the weak association rules in association analysis to detect configuration anomaly. And we can generate a configuration anomaly verification model through training the processed configuration data, which is applied to scan the massive configuration data and output configuration anomaly results. At the same time, we constructed a network configuration verification system based on ZTE's AI platform and verified the effectiveness of the algorithm and model by using the massive realistic configuration data collected from the existing networks. The experimental results show that the precision and recall of the proposed network configuration verification system are above 80%.
References
[1]
Z. Kerravala, “As the value of enterprise networks escalates, so does the need for configuration management,” The Yankee Group, Jan. 2004.
[2]
Arbor Networks Inc., “Worldwide infrastructure security report, volumevi,” http://www.arbornetworks.com/report, 2010.
[3]
https://baijiahao.baidu.com/s?id=1713736083905044522&wfr=spider&for=pc. 2021/10/16/.
[4]
http://www.myzaker.com/article/62e3251e8e9f095d7f681752. 2022/7/7/.
[5]
Keir Thomas, “Thanks, Amazon: The Cloud Crash Reveals Your Importance,” Retrieved from http://www.pcworld.com/article/226033/thanks_amazon_for_making_possible_much_of_the_internet.html. 2011.
[6]
Jon Brodkin, “Why Gmail Went Down: Google Misconfigured Load Balancing Servers,” Retrieved from http://arstechnica.com/information-technology/2012/12/why-gmail-went-down-google-misconfigured-chromes-sync-server/. 2012.
[7]
Tianyang Liu, Haoyuan Mei, “Application of neural network in fault location of optical transport network,” China Communications, 2019 (10): 214–225.
[8]
Yang Lei, “Network Anomaly Traffic Detection Algorithm Based on SVM,” 2017 International Conference on Robots & Intelligent System (ICRIS), November 2017.
[9]
Guowei ZHU, Hui YUAN, “Research on network intrusion detection method of power system based on random forest algorithm,” 2021 13th International Conference on Measuring Technology and Mechatronics Automation (ICMTMA), April 2021.
[10]
Jia Xu, Yang Guo, “Research on Hierarchical Software Clustering Algorithm Based on Wireless Network,” 2019 International Conference on Computer Network, Electronic and Automation (ICCNEA), November 2019.
[11]
Dr. S.Vijayaran, Ms. S.Sharmila, “Comparative analysis of association rule mining algorithms,” 2016 International Conference on Inventive Computation Technologies)ICICT(, January 2017.
[12]
Jian Wang,Ying Deng, “Prediction Method of Distribution Network Area Based on Association Analysis and Machine Learning,” 2021 IEEE 5th Information Technology, Networking, Electronic and Automation Control Conference (ITNEC), November 2021.
[13]
Zhenfu Jian, Jiayu Xu, “Big data analysis and mining,” Tsinghua University Press, 2016, pp. 55-60.
[14]
LJ Liu, “Research and application of improved Apriori algorithm,” Computer Engineering and Design, 2017, vol. 38, pp. 3324-3328.
[15]
Qiu H, Gu R, Yuan C, “YAFIM: A Parallel Frequent Itemset Mining Algorithm with Spark,” Parallel & Distributed Processing Symposium Workshops (IPDPSW), 2014 IEEE International conference, pp. 1664-1671.
[16]
Xiwu Liu, Dandan Ma, “Application of AI Based Configuration Audit System in 5G Backhaul,” Network Designing Techniques of Posts and Telecommunications, 2021(8): 15-19.
[17]
Kiran Nagaraja, Fabio Oliveira, “Understanding and dealing with operator mistakes in internet services,” In Proceedings of the 6th USENIX Conference on Operating Systems Design and Implementation (OSDI’2004).
[18]
Yingfei Xiong, Arnaud Hubaux, “Generating range fixes for software configuration,” In Proceedings of the 34th International Conference on Software Engineering (ICSE’2012).
[19]
Nick Feamster and Hari Balakrishnan, “Detecting BGP configuration faults with static analysis,” In Proceedings of the 2nd USENIX Symposium on Networked Systems Design and Implementation (NSDI’2005).
[20]
Peng Huang, William, “KungfuValley: A systematic configuration validation framework for cloud services,” In Proceedings of the 10th ACM European Conference in Computer Systems (EuroSys’2015).
[21]
Emre Kiciman and Yi-Min Wang, “Discovering correctness constraints for self-management of system configuration,” In Proceedings of the 1st International Conference on Autonomic Computing (ICAC’2004).
[22]
Lujo Bauer, Scott Garriss, “Detecting and resolving policy misconfigurations in access-control systems,” ACM Transactions on Information and System Security (TISSEC) 14, 1 (May 2011), 1–28.
[23]
Mark Santolucito, Ennan Zhai, “Synthesizing Configuration File Specifications with Association Rule Learning,” Proc. ACM Program. Lang. 1, OOPSLA, Article 64 (October 2017).
Index Terms
- Research on Network Configuration Verification Based on Association Analysis
Recommendations
Incremental Network Configuration Verification
HotNets '20: Proceedings of the 19th ACM Workshop on Hot Topics in NetworksNetwork configurations are constantly changing, and each change poses a risk of catastrophic network outages. Consequently, the networking community has put significant effort into developing and optimizing configuration verifiers. However, we observe ...
Synthesizing configuration file specifications with association rule learning
System failures resulting from configuration errors are one of the major reasons for the compromised reliability of today's software systems. Although many techniques have been proposed for configuration error detection, these approaches can generally ...
A Distributed Algorithm of Density-Based Subspace Frequent Closed Itemset Mining
HPCC '08: Proceedings of the 2008 10th IEEE International Conference on High Performance Computing and CommunicationsLarge, dense-packed and high-dimensional data mining is one challenge of frequent closed itemset mining for association analysis, although frequent closed itemset mining is an efficient approach to reduce the complexity of mining frequent itemsets. This ...
Comments
Please enable JavaScript to view thecomments powered by Disqus.Information & Contributors
Information
Published In
Copyright © 2022 ACM.
Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]
Publisher
Association for Computing Machinery
New York, NY, United States
Publication History
Published: 13 December 2022
Check for updates
Author Tags
Qualifiers
- Research-article
- Research
- Refereed limited
Conference
CSAE 2022
CSAE 2022: The 6th International Conference on Computer Science and Application Engineering
October 21 - 23, 2022
Virtual Event, China
Acceptance Rates
Overall Acceptance Rate 368 of 770 submissions, 48%
Contributors
Other Metrics
Bibliometrics & Citations
Bibliometrics
Article Metrics
- 0Total Citations
- 52Total Downloads
- Downloads (Last 12 months)32
- Downloads (Last 6 weeks)1
Reflects downloads up to 28 Sep 2024
Other Metrics
Citations
View Options
Get Access
Login options
Check if you have access through your login credentials or your institution to get full access on this article.
Sign inFull Access
View options
View or Download as a PDF file.
PDFeReader
View online with eReader.
eReaderHTML Format
View this article in HTML Format.
HTML Format