Topographical proximity for mining network alarm data

ABSTRACT

Increasingly powerful fault management systems are required to ensure robustness and quality of service in today's networks. In this context, event correlation is of prime importance to extract meaningful information from the wealth of alarm data generated by the network. Existing sequential data mining techniques address the task of identifying possible correlations in sequences of alarms. The output sequence sets, however, may contain sequences which are not plausible from the point of view of network topology constraints. This paper presents the Topographical Proximity (TP) approach which exploits topographical information embedded in alarm data in order to address this lack of plausibility in mined sequences. An evaluation of the quality of mined sequences is presented and discussed. Results show an improvement in overall system performance for imposing proximity constraints.

REFERENCES

• 1: 3GPP. 3rd generation partnership project technical specification group services and system aspects. Telecommunication management. Fault Management. Part 2: Alarm Integration Reference Point (IRP), Information Service (IS), (Release 6) 3GPP TS 32.111-2 V6.3.0, 3GPP, 2004.
• 2: Rakesh Agrawal , Tomasz Imieliński , Arun Swami, Mining association rules between sets of items in large databases, Proceedings of the 1993 ACM SIGMOD international conference on Management of data, p.207-216, May 25-28, 1993, Washington, D.C., United States
• 3: R. Gopal. Layered model for supporting fault isolation and recovery. In Proc. of NOMS'00, Hawaii, 2000.
• 4: Jiawei Han , Jian Pei , Yiwen Yin , Runying Mao, Mining Frequent Patterns without Candidate Generation: A Frequent-Pattern Tree Approach, Data Mining and Knowledge Discovery, v.8 n.1, p.53-87, January 2004 [doi>10.1023/B:DAMI.0000005258.31418.83]
• 5: E. O. Heierman, G. M. Youngblood, and D. J. Cook. Mining temporal sequences to discover interesting patterns. In Proceedings of KDD 2004, Workshop on mining temporal and sequential data, 2004.
• 6: G. Liu, A. K. Mok, and E. J. Yang. Composite events for network event correlation. In IM'99, pages 247--260, 1999.
• 7: Heikki Mannila , Hannu Toivonen , A. Inkeri Verkamo, Discovery of Frequent Episodes in Event Sequences, Data Mining and Knowledge Discovery, v.1 n.3, p.259-289, 1997 [doi>10.1023/A:1009748302351 ]
• 8: D. M. Meira and J. M. S. Nogueira. Modelling a telecommunication network for fault management applications. In Proc. of NOMS'98, pages 723--732, 1998.
• 9: Ramakrishnan Srikant , Rakesh Agrawal, Mining Sequential Patterns: Generalizations and Performance Improvements, Proceedings of the 5th International Conference on Extending Database Technology: Advances in Database Technology, p.3-17, March 25-29, 1996
• 10: M. Steinder and A. S. Sethi. Non-deterministic diagnosis of end-to-end service failures in a multi-layer communication system. In Proc. of ICCCN'01, pages 374--379, Arizona, 2001.
• 11: R. Sterritt. Discovering rules for fault management. In Proc. of ECBS'01, pages 190--196, 2001.
• 12: Gary M. Weiss, Industry: predicting telecommunication equipment failures from sequences of network alarms, Handbook of data mining and knowledge discovery, Oxford University Press, Inc., New York, NY, 2002
• 13: H. Wietgrefe, K.-D. Tuchs, K. Jobmann, G. Carls, P. Frohlich, W. Nejdl, and S. Steinfeld. Using neural networks for alarm correlation in cellular phone networks. In Proc. of IWANNT 1997, 1997.
• 14: S. A. Yemini, S. Kliger, E. Mozes, Y. Yemini, and D. Ohsie. High speed and robust event correlation. IEEE Communications Magazine, 34(5):82--90, 1996.
• 15: Mohammed J. Zaki, SPADE: an efficient algorithm for mining frequent sequences, Machine Learning, v.42 n.1/2, p.31-60, Jan. 2001 [doi>10.1023/A:1007652502315 ]

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.8 Database applications
          Subjects: Data mining

General Terms:
Algorithms, Experimentation

Keywords:
event correlation, fault data, mining sequential patterns, network configuration, topographical proximity