NSDMiner: Automated discovery of Network Service Dependencies

—Enterprise networks today host a wide variety of network services, which often depend on each other to provide and support network-based services and applications. Understanding such dependencies is essential for maintaining the well-being of an enterprise network and its applications, particularly in the presence of network attacks and failures. In a typical enterprise network, which is complex and dynamic in configuration, it is non-trivial to identify all these services and their dependencies. Several techniques have been developed to learn such dependencies automatically. However, they are either too complex to fine tune or cluttered with false positives and/or false negatives. In this paper, we propose a suite of novel techniques and develop a new tool named NSDMiner (which stands for Mining for Network Service Dependencies) to automatically discover the dependencies between network services from passively collected network traffic. NSDMiner is non-intrusive; it does not req...

• Type: Journal
• Year: 2012
• Where: INFOCOM
• Authors: Arun Natarajan, Peng Ning, Yao Liu, Sushil Jajodia, Steve E. Hutchinson
• Keywords: Communications, Existing Solutions, INFOCOM 2012, Network Packets, Typical Enterprise