Early Detection of Network Service Degradation: An Intra-Flow Approach
This research presents a novel method for predicting service degradation (SD) in computer networks by leveraging early flow features. Our approach focuses on the observable (O) segments of network flows, particularly analyzing Packet Inter-Arrival Time (PIAT) values and other derived metrics, to infer the behavior of non-observable (NO) segments. Through a preliminary evaluation, we identify an optimal O/NO split threshold of 10 observed delay samples, balancing prediction accuracy and resource utilization. Evaluating models including Logistic Regression, XGBoost, and Multi-Layer Perceptron, we find XGBoost outperforms others, achieving an F<inf xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">1</inf>-score of 0.74, balanced accuracy of 0.84, and AUROC of 0.97. Our findings highlight the effectiveness of incorporating early flow features and the potential of our method to offer a practical solution for monitoring network traffic in resource-constrained environments.
Authors
- Adrián Pekár (ORCID: https://orcid.org/0000-0003-4511-8267)
- Balint Bicski
Institutions
- Budapest University of Technology and Economics (HU)
Publication Details
- Published
- 2024-10-28
- DOI
- https://doi.org/10.23919/cnsm62983.2024.10814309
- Citations
- 1
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 0.35
Funders
- Innovation Fund