Skip navigation links
About the lab
People
Research Domains
Publications & Reports

Anomaly detection and troubleshooting


The analysis of Internet traffic is an important area for Thomson as a world leader in IP set-top-boxes and tripleplay gateways. We believe that the future of performance monitoring and service troubleshooting is to perform them closer to the end user. Our vision is to run the detection and troubleshooting techniques on the home gateways. This research activity articulates around two topics.

- Anomaly detection. Inside today’s Internet the distinction between legitimate and unwanted traffic is thin. Using live Internet traces from multiple source network we characterize the unwanted traffic and observe its propagation inside the Internet. We develop multiple techniques to emphasize the difference and ease the removal of the unwanted traffic. These anomaly detection techniques can be provided as a service to ISPs and help Internet user protect themselves from malicious attackers.
- Network Troubleshooting. Very often the users or network administrator are faced with a performance degradation that they can not explain. We design techniques to pinpoint the origin of service disruptions and degradations experienced by customers. Using a combination of passive and active measurements we can identify the root cause of a problem and fix it.