WebClass

WebClass is a web based tool designed to allow manual inspection and labeling of traffic anomalies. It interfaces with a database server, containing primarily three kinds of records:
  • traffic measurements;
  • time bins that have been identified as anomalous;
  • and labels, produced by human operators, for the anomalies.
The graphical interface presents time series of traffic measurements around the anomalous time bins. At first, this interface allows the user to visualize how an anomaly impacts basic traffic statistics, such as traffic volume and entropy. It is possible to zoom in/out or scroll on the time series. Moreover, the user may also request more detailed information such as the top-n IP header features.
This varied level of detail allows the analyst to produce a better informed diagnosis of the potential traffic anomalies. The tool is built to allow multiple operators to label anomalies concurrently. This makes the whole process not only faster, but also more reliable, by smoothing out the subjectivity of manual labeling.

Getting access to WebClass

Right now, we wish to control the access of users to our database. Therefore, if you wish to obtain access to WebClass, you can contact Augustin Soule by e-mail (augustin [dot] soule [at] thomson [dot] net).

Created on August 17th, 2007
Last updated on August 19th, 2007