NetEventCause:对于没有拓学的大型网络系统进行事件驱动的根本原因分析
概括
本研究介绍了NetEventCause (NEC),这是一个用于网络根本原因分析 (RCA) 的无监督算法. NEC有效地识别出异常的网络节点,即使是未知的拓,超过现有的方法.
科学领域:
- 计算机科学 计算机科学
- 网络工程 网络工程
- 数据科学数据科学数据科学
背景情况:
- 根源原因分析 (RCA) 对于网络系统来说至关重要,以识别导致警报洪水的异常节点.
- 私有云中的不完整的网络拓阻碍了传统的RCA方法.
- 现有的无拓RCA技术对于大规模或稀疏的报警场景是无效的.
研究的目的:
- 提出NetEventCause (NEC),一个以事件驱动,不受监督和非侵入性的RCA算法,用于未知拓的大规模网络系统.
- 准确地建模报警事件的发生情况,并在复杂的网络环境中确定根源原因.
- 在大型或稀疏的报警场景中克服现有的RCA技术的局限性.
主要方法:
- 开发了NEC,一种使用多变量神经时间点过程 (TPP) 建模历史警报事件的算法.
- 从学习的TPP中使用条件强度预测来识别根警报.
- 应用了归因方法来从衍生事件中定位因果警报.
主要成果:
- 与最先进的TPP模型相比,NEC在模拟报警事件方面表现出卓越的表现.
- 该算法有效地识别了根警报,并恢复了异常传输链.
- 使用合成和来自主要机场网络运营中心的大规模现实世界数据集进行评估.
结论:
- 在未知拓的大型网络系统中,NEC为无监督,无侵入的RCA提供了有效的解决方案.
- 该算法在实际网络场景中显著优于一般的RCA方法和SOTA TPP模型.
- NEC为网络维护和运营提供了强大的方法,特别是在复杂的环境中.
相关概念视频
Plotting and Calibrating the Root Locus
436
Root loci often diverge as system poles shift from the real axis to the complex plane. Key points in this transition are the breakaway and break-in points, indicating where the root locus leaves and reenters the real axis. The branches of the root locus form an angle of 180/n degrees with the real axis, where n is the number of branches at a breakaway or break-in point.
The maximum gain occurs at the breakaway points between open-loop poles on the real axis, while the minimum gain is...
The maximum gain occurs at the breakaway points between open-loop poles on the real axis, while the minimum gain is...
436
Properties of the Root Locus
284
The root locus method is an invaluable tool for analyzing higher-order systems without needing to factor the denominator of the transfer function. A pole of the system is identified when the characteristic polynomial in the transfer function's denominator equals zero.
To determine if a point lies on the root locus, the criterion involves the sum of angles contributed by all poles and zeros to that point. Specifically, this sum must be an odd multiple of 180 degrees. The gain at any point on...
To determine if a point lies on the root locus, the criterion involves the sum of angles contributed by all poles and zeros to that point. Specifically, this sum must be an odd multiple of 180 degrees. The gain at any point on...
284
Distributed Loads: Problem Solving
1.1K
Beams are structural elements commonly employed in engineering applications requiring different load-carrying capacities. The first step in analyzing a beam under a distributed load is to simplify the problem by dividing the load into smaller regions, which allows one to consider each region separately and calculate the magnitude of the equivalent resultant load acting on each portion of the beam. The magnitude of the equivalent resultant load for each region can be determined by calculating...
1.1K
Circuit Terminology
2.8K
An electrical network is a system composed of interconnected elements, such as resistors, capacitors, inductors, and voltage or current sources. Unlike a circuit, an electrical network does not necessarily form a closed path. In other words, while all circuits can be considered networks due to their interconnected nature, not every network qualifies as a circuit.
A circuit, on the other hand, is also an interconnected system of electrical elements but must contain one or more closed paths.
A circuit, on the other hand, is also an interconnected system of electrical elements but must contain one or more closed paths.
2.8K
Multimachine Stability
548
Multimachine stability analysis is crucial for understanding the dynamics and stability of power systems with multiple synchronous machines. The objective is to solve the swing equations for a network of M machines connected to an N-bus power system.
In analyzing the system, the nodal equations represent the relationship between bus voltages, machine voltages, and machine currents. The nodal equation is given by:
In analyzing the system, the nodal equations represent the relationship between bus voltages, machine voltages, and machine currents. The nodal equation is given by:
548
Root-Locus Method
480
A cruise control system in a car is designed to maintain a specified speed automatically by adjusting the gas pedal. The system continuously measures the vehicle's speed and makes fine adjustments to the pedal to achieve this goal. The root locus method is particularly useful for understanding how the cruise control system's behavior changes under varying conditions, such as when the car goes uphill, downhill, or faces strong wind resistance.
This system can be represented by a block...
This system can be represented by a block...
480


