EbAT: An entropy based online Anomaly Tester for data center management. Wang, C., Schwan, K., & Wolf, M. In 2009 IFIP/IEEE International Symposium on Integrated Network Management-Workshops, pages 79–80, June, 2009.
doi  abstract   bibtex   
The online detection of anomalies is a vital task in data centers, potentially incurring high personnel costs. Causes of anomalies range from hardware/software failures, to resource over- or under-provisioning, to application misbehaviors. This paper develops new methods and an associated utility for online anomaly detection, termed EbAT, entropy based anomaly tester, which can efficiently detect anomalies. This is done without the need for operator interaction, analysis intervention, or predefineed system models or rules. EbAT also offers ways to dasiazoom inpsila on detected anomalies, the intent being to localize anomalies to certain components of the data center's applications or facility. EbAT is implemented in the context of virtual machine monitors, using Xen as a representative platform, and it is used to detect anomalous behaviors on such platforms running multi-tier enterprise and map-reduce applications.
@inproceedings{wang_ebat:_2009,
	title = {{EbAT}: {An} entropy based online {Anomaly} {Tester} for data center management},
	shorttitle = {{EbAT}},
	doi = {10.1109/INMW.2009.5195940},
	abstract = {The online detection of anomalies is a vital task in data centers, potentially incurring high personnel costs. Causes of anomalies range from hardware/software failures, to resource over- or under-provisioning, to application misbehaviors. This paper develops new methods and an associated utility for online anomaly detection, termed EbAT, entropy based anomaly tester, which can efficiently detect anomalies. This is done without the need for operator interaction, analysis intervention, or predefineed system models or rules. EbAT also offers ways to dasiazoom inpsila on detected anomalies, the intent being to localize anomalies to certain components of the data center's applications or facility. EbAT is implemented in the context of virtual machine monitors, using Xen as a representative platform, and it is used to detect anomalous behaviors on such platforms running multi-tier enterprise and map-reduce applications.},
	booktitle = {2009 {IFIP}/{IEEE} {International} {Symposium} on {Integrated} {Network} {Management}-{Workshops}},
	author = {Wang, C. and Schwan, K. and Wolf, M.},
	month = jun,
	year = {2009},
	keywords = {Application software, Costs, EbAT, Educational institutions, Hardware, Monitoring, System testing, Technology management, analysis intervention, cloud computing, computer centres, data center management, entropy, entropy based online anomaly tester, online anomaly detection, operator interaction, predefineed system models, security of data, virtual machine monitors},
	pages = {79--80},
}

Downloads: 0