Event Prediction in Network Monitoring Systems: Performing Sequential Pattern Mining in Osmius Monitoring Tool
Event prediction is one of the most challenging problems in network monitoring systems. This type of inductive knowledge provides monitoring systems with valuable real time predictive capabilities. By obtaining this knowledge, system and network administrators can anticipate and prevent failures.
In this paper we present a prediction module for the monitoring software Osmius ( www.osmius.net ). Osmius has been developed by Peopleware ( peopleware.es ) under GPL licence. We have extended the Osmius database to store the knowledge we obtain from the algorithms in a highly parametrized way. Thus system administrators can apply the most appropriate settings for each system.
Results are presented in terms of positive predictive values and false discovery rates over a huge event database. They confirm that these pattern mining processes will provide network monitoring systems with accurate real time predictive capabilities.
KeywordsAssociation Rule Frequent Pattern Intrusion Detection System Prediction Module Mining Association Rule
Unable to display preview. Download preview PDF.
- 2.Cheng, H., Yan, X., Han, J.: Incspan: Incremental mining of sequential patterns in large database. In: Proceedings of the tenth ACM SIGKDD international conference on Knowledge discovery and data mining (2004)Google Scholar
- 6.Hasan, M., Chaoji, V., Salem, S., Parimi, N., Zaki, M.: Dmtl: A generic data mining template library. In: Workshop on Library-Centric Software Design (LCSD 2005), with Object-Oriented Programming, Systems, Languages and Applications (OOPSLA 2005) conference, San Diego, California (2005)Google Scholar
- 10.Srikant, R., Vu, Q., Agrawal, R.: Mining association rules with item constraints. In: Proc. 1997 Int. Conf. Knowledge Discovery and Data Mining, Newport Beach, CA, pp. 67–73 (1997)Google Scholar
- 11.Van Bon, J.: The guide to IT service management. Addison-Wesley, Reading (2002)Google Scholar
- 16.Zaki, M.: DMTL (December 2007), http://sourceforge.net/projects/dmtl
- 17.Zequn, Z., Eseife, C.I.: A low-scan incremental association rule maintenance method based on the apriori property. In: Stroulia, E., Matwin, S. (eds.) Canadian AI 2001. LNCS (LNAI), vol. 2056, pp. 26–35. Springer, Heidelberg (2001)Google Scholar