G. Jakobson and M. D. Weissman. Alarm correlation. IEEE Network, 7(6):52--59, Nov. 1993.  Home/Search   Document Not in Database   Summary   Related Articles   Check

....as a whole. Alarmcorrelati on systems typically are expert systems performing operations such as (i) removing alarms carrying redundant information, ii) ltering out low priorit y alarms when higher prior ity alarms are present, or (iii) substi tuting a set of alarms by some new information [4]. The goal of alarm corre lation is to reduce the amount of information shown to the network managers, improve the usefulness of the information , and ultimately to identify the most probable faults that caused thealarms and topossibly even propose corrective ac tions. In addition to the ....

G. Jakobson and M. D. Weissman, Alarm correlation, IEEE Network, Vol. 7,No. 6,pp. 5259, 1993.

....the Event Correlator (EC) and the Root Cause Analyzer (RCA) as depicted in Figure 3. The goal of the Event Correlator is improve the information content of the observed events by filtering out uninteresting, secondary alarms from the alarm flood arriving at the network management station [11, 14]. Secondary alarms or symptoms are observable events that are directly caused by other events observed in the network. This filtering is implemented with the help of a set of fault propagation rules that the Event Correlator uses to model the propagation of alarm signals in the underlying ....

G. Jakobson and M.D. Weissman. "Alarm Correlation". IEEE Network, November 1993.

....or malicious alterations. Since fault propagation generates alarm propagation, techniques for alarm correlation are relevant to the third step in our program detecting activation of a generic propagation mechanism. There is a large body of literature on alarm correlation. Some examples include [JW93], JW95] KS95] N95] YK 96] HSV99] among others. We also note that in the MAGDA Project [FBJ 00] the interaction of network elements in fault propagation is modeled using Petri nets. In this paper, we focus on a single example of a generic propagation mechanism: overload propagation in ....

G. Jakobson and M. Weissman, "Alarm correlation," IEEE Network, 7 (6), November 1993.

....[13] making it very difficult to isolate the true cause of the fault [14] Failures in the network are unavoidable but quick detection and identification of the faults responsible is essential to ensure robustness. To this end the ability to correlate alarm event messages becomes very important [15]. The major telecommunication equipment manufacturers deal with event correlation through alarm monitoring, filtering and masking as specified by ITU T [16] and other international standard bodies. Resulting rule type diagnostic systems provide assistance to the operator whose expertise is then ....

G. Jackobson and M.D. Weissman, "Alarm correlation", IEEE Network, vol. 7, no. 6, pp. 52-59, Nov. 1993.

....and positive symptoms in the analysis. As shown in a simulation study, the technique is resilient both to noise in the symptom data and to the inaccuracies of the probabilistic fault propagation model. 1. Introduction This paper presents a non deterministic event driven fault localization [9, 10, 17] technique, which uses a probabilistic symptom fault map as a fault propagation model. While investigating fault localization techniques suitable for bipartite fault propagation models, this paper states the following objectives: Usage of probabilistic reasoning, which is necessary to diagnose ....

G. Jakobson and M. D. Weissman. Alarm correlation. IEEE Network, 7(6):52--59, Nov. 1993.

....knowledge among multiple, hierarchically organized managers. The cooperation among managers is illustrated with examples, and the results of a preliminary performance study are presented. 1 Introduction End to end network service failure diagnosis [15, 17] is a sub task of fault localization [7, 9, 19] that isolates host to host services responsible for availability or performance problems associated with a communication between end hosts. In [16, 17] probabilistic inference was applied to provide a non deterministic solution to this problem. The probabilistic fault propagation model ....

G. Jakobson and M. D. Weissman. Alarm correlation. IEEE Network, 7(6):52--59, Nov. 1993.

....the observable malfunctioning of the managed system. In this section, we define the vocabulary related to fault localization and describe the most common problems it is associated with. Event is an exceptional condition occurring in the operation of the hardware or software of the managed network [22, 41]. Faults (also referred to as root problems) constitute a class of network events that can be handled directly [22, 41] Faults may be classified according to their duration time as: 1) permanent, 2) intermittent, and (3) transient [40] Permanent fault exists in a network until a repair action ....

....and describe the most common problems it is associated with. Event is an exceptional condition occurring in the operation of the hardware or software of the managed network [22, 41] Faults (also referred to as root problems) constitute a class of network events that can be handled directly [22, 41]. Faults may be classified according to their duration time as: 1) permanent, 2) intermittent, and (3) transient [40] Permanent fault exists in a network until a repair action is taken. Intermittent faults occur on a discontinuous and periodic basis, causing degradation of service for short ....

[Article contains additional citation context not shown here]

G. Jakobson and M. D. Weissman. Alarm correlation. IEEE Network, pp. 52--59, Nov. 1993.

....the constantly changing topology of a multi domain server farm; and the development of a concise specification language that is relatively simple yet powerful. Keywords Fault and Performance Management, Management of Service Level Agreements Research Paper 1 Introduction Event correlation [13] is a commonly used technique for isolating the root cause of a problem from a stream of reported symptoms. Efficient and precise event correlation is essential for reducing network maintenance costs and improving the availability and performance of network services. Commercial correlation engines ....

.... Techniques to tune threshold values Threshold violations and system bottleneck prediction Support for uncertainty and lost events 13 6 Related work In the past various event correlation techniques were proposed including rule based systems [18, 26] model based reasoning systems [13, 21], model traversing techniques [14, 15] case based systems [17] fault propagation models [9, 16] and the code book approach [27] Rule based systems are composed of rules (productions) of the form conclusion if condition. The condition part is a logical combination of propositions about the ....

[Article contains additional citation context not shown here]

G. Jakobson and M. D. Weissman. Alarm correlation. IEEE Network, pages 52--59, Nov. 1993.

....network, and then the approximations based on Pearl s algorithms and exact bucket tree elimination algorithm are designed and evaluated through extensive simulation study. Keywords Fault localization, probabilistic inference, belief networks, event correlation 1 Introduction Fault localization [15, 18, 35], a central aspect of network fault management, isolates the most probable set of root problems based on their external manifestations, called Prepared through collaborative participation in the Communications and Networks Consortium sponsored by the U. S. Army Research Laboratory under the ....

.... 10 20 30 40 50 60 time [sec] Graph size one fault two faults three faults four faults Figure 9: Fault localization time with Algorithm 7 Related work In the past, various event correlation techniques were proposed including rule based systems [22, 34] model based reasoning systems [15, 24], model traversing techniques [16] case based systems [21] fault propagation models [12, 18] and the codebook approach [35] Most of the above approaches utilize deterministic reasoning. This paper focuses on non deterministic event correlation which is unavoidable in fault diagnosis related to ....

G. Jakobson and M. D. Weissman. Alarm correlation. IEEE Network, 7(6):52--59, Nov. 1993.

....either no result, or a default result will be given. For example, if the received alarms are Loss of light 12 and Loss of light 23, a pure Expert System would not give any solution. When multiple alarms are received, and more than one rule applies, the proprietary system of Jakobson and Weissman [JW93] has the advantage of combining rules in such a way that the joint information on the failure is larger than the sum of individual information carried by each individual rule. The system is used in a commercial shell called Intelligent Management Platform for Alarm Correlation Tasks (IMPACT) ....

G. Jakobson and M. Weissman. Alarm Correlation. IEEE Network, pages 52--59, November 1993.

....network failures to occur at the same time. The preliminary investigation is promising future research will further explore applications to specific military systems and protocols, e.g. MIL STD 188 220 [7] operating in the midst of multiple link failures. 2 EVENT CORRELATION Event correlation [11] is a commonly used technique for isolating the root cause of a problem from its reported symptoms. Efficient and precise event correlation is essential for reducing network maintenance costs and improving the availability and performance of network services. The problems typically addressed in ....

G. Jakobson and M. D. Weissman. Alarm correlation. IEEE Network, pp. 52--59, 1993.

.... mellitus [2, 44] Engineering applications include monitoring for catastrophes such as earthquakes [45] and structurallyunstable buildings [7] or more routine tasks such as the control of manufacturing plant processes [30] electric power delivery systems [22, 42] communications networks [39, 55, 60], and freeway traffic flow [51] Examples in economics and finance include making timely securityinvestment decisions based on company earning forecasts [68] or more capital intensive decisions based on longer range forecasts of economic cycles [41] Each of these applications involves a dynamic ....

G. Jakobson and M. Weissman. Alarm correlation. IEEE Network, 7(6):52--59, November 1993.

....show that the SMC algorithm with Inter correlated or Intra correlated constraint is about two times faster than the algorithm with no constraints. Keywords Alarm correlation, model based diagnosis, sequence mining, fault management, network management 1. Introduction Alarm correlation [1] plays an important role in isolating the root cause of problems from a stream of alarms for networks. Modern telecommunication networks generate a massive number of alarms, which make the analysis of alarm correlation more difficult than before. Many researchers look for a new method to ....

....into the method of data mining, for the rules of alarm correlation are closely related to the logical and physical architecture of networks. Model Based Reasoning (MBR) was originally proposed in [12] the principles of which have been widely applied in the analysis of alarm correlation [1,13,14,15,16,17]. MBR system consists of a network model and a function model. In the case of telecommunication networks, network model is composed of network topology and network elements. In this paper, we propose the intelligent search of correlated alarms with model based constraints, called SMC ....

[Article contains additional citation context not shown here]

G. Jakobson and M. D. Weissman, Alarm Correlation, IEEE Network, page52-59, November 1993.

....[13] which is sort of a compromise between signature analysis and behavioral profiling. B. Related Research in Fault Detection EMERALD is somewhat similar conceptually to various efforts in alarm correlation and high volume event correlation fault detection in the network management community [8], 15] 16] EMERALD s architecture and layered analysis is somewhat similar to the dis tributed event correlation system (DECS) discussed in [12] However, DECS makes several simplifications in its stateless event modeling scheme that do not translate well to a malicious environment for ....

G. Jakobson and M.D. Weissman. Alarm correlation. IEEE Network, pages 52 59, November 1993.

....are therefore a promising model for nondeterministic fault localization, yielding high accuracy even for approximate probability input data. IX. RELATED WORK In the past, various event correlation techniques were proposed including rule based systems [22] 23] model based reasoning systems [24], 25] model traversing techniques [26] case based systems [27] fault propagation models [6] 7] and 0 7803 7476 2 02 17.00 (c) 2002 IEEE. 0.55 0.6 0.65 0.7 0.75 0.8 0.85 0.9 0.95 1 rate Network size exact three confidence levels two confidence levels one confidence level ....

G. Jakobson and M. D. Weissman, "Alarm correlation," IEEE Network, vol. 7, no. 6, pp. 52--59, Nov. 1993.

....especially in the fault management, which needs seasoned engineers to do alarm correlation, determine which alarm indicates a fault and find the cause of the fault. Alarm correlation is a conceptual interpretation of multiple alarms such that new meanings are assigned to these alarms [1]. In the past, the knowledge of alarm correlation was mainly obtained from network experts. But with the development of telecommunication networks, it is much more difficult for experts to keep up with the rapid change of networks. So more and more researchers adopt data mining methods to ....

.... frequent episode from large alarm database, which was applied to the TASA system [4] Weiss and Hirsh [9] studied how to predict the rare event from alarm database by genetic algorithms and presented the timeweaver algorithm, which was applied to the ANSWER system [10] Although many methods [1,2,9,20,21,22,23] have been proposed to analyze the alarm correlation, few methods took account of the effects of noise data contained in alarm database. In order to discover alarm correlation rules from alarm database containing noise data, we define two parameters Win freq and Win add as the measures of ....

[Article contains additional citation context not shown here]

G. Jakobson and M. D. Weissman, Alarm Correlation, IEEE Network, page52-59, November 1993.

....customers and their connections as well as network speci c information. Integrating and combining these data sources is an crucial task not only for management or marketing units, but also for system and network management. For example, one function of fault management is alarm correlation [12]: identifying network faults and their causes. De ning the necessary correlation model is a complex task, especially for large scale networks. By analyzing historical alarm sequences the network operator can identify frequent pattern and derive rules for generalization and compression of alarms ....

G. Jakobson and M.D. Weissman. Alarm Correlation. IEEE Network, 7(6):52-59, November 1993.

....establish the underlying problem or condition that produced the events. Successful implementation of an event correlation system can increase revenue since problems can be identified faster, resulting in a quicker restoration of service. In this paper, we define the process of alarm correlation [2,3,7] in the telecommunications network domain and go on to briefly outline some of the correlation systems which have been proposed by academic and industrial research establishments. This will provide sufficient context for the new, artificial neural network paradigm to be presented which solves some ....

Jakobson, G., Weissman M., "Alarm Correlation", IEEE Network, Vol. 7, No. 6.

....temporal information[28] Additionally, as the rate of change in networks increases, it becomes more 2 difficult for a human network manager to maintain a sufficient level of expertise on behavior of the network. Previous research in fault management has covered approaches such as expert systems[12], Finite State Machines (FSMs) 20] advanced database techniques[27] and probabilistic approaches[6] 5] A review of communication network fault detection and identification can be found in [13] The approaches mentioned above require specification of the faults to be detected. This limits the ....

G. Jakobson, M. D. Weissman, "Alarm correlation," IEEE Network, November 1993, pp. 52-59.

....an important but difficult area of telecommunications network management. Networks produce large amounts of alarm information that must be analysed and interrupted before the faults can be located [23] As has been stated earlier alarm correlation is the central technique in fault identification [18]. The instance of a fault can cause numerous alarm events to be raised from an individual network element (NE) this means that the alarms are often interrelated. Also a fault may trigger numerous similar and different alarms to be generated in different NE s up or down stream on the network. For ....

G. Jackobson, M.D. Weissman, "Alarm correlation", IEEE Network, 7(6), pp52-59, November 1993.

No context found.

G. Jakobson and M. D. Weissman. Alarm correlation. IEEE Network, 7(6):52--59, Nov. 1993.

No context found.

G. Jakobson and M. Weissman, Alarm Correlation, IEEE Network, Vol. 7, No. 6., 1993.

No context found.

G. Jakobson and M. D. Weissmann. Alarm correlation. IEEE Network, Nov. 1993.

No context found.

G. Jackobson and M.D. Weissman, "Alarm correlation", IEEE Network, vol. 7, no. 6, pp. 52-59, Nov. 1993.

No context found.

G. Jakobson, M.D. Weissman, Alarm correlation, IEEE Network 7 (6) (1993) 52--59.

First 50 documents

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC