• KSII Transactions on Internet and Information Systems
    Monthly Online Journal (eISSN: 1976-7277)

An Anomaly Detection Framework Based on ICA and Bayesian Classification for IaaS Platforms

Vol. 10, No. 8, August 30, 2016
10.3837/tiis.2016.08.024, Download Paper (Free):

Abstract

Infrastructure as a Service (IaaS) encapsulates computer hardware into a large amount of virtual and manageable instances mainly in the form of virtual machine (VM), and provides rental service for users. Currently, VM anomaly incidents occasionally occur, which leads to performance issues and even downtime. This paper aims at detecting anomalous VMs based on performance metrics data of VMs. Due to the dynamic nature and increasing scale of IaaS, detecting anomalous VMs from voluminous correlated and non-Gaussian monitored performance data is a challenging task. This paper designs an anomaly detection framework to solve this challenge. First, it collects 53 performance metrics to reflect the running state of each VM. The collected performance metrics are testified not to follow the Gaussian distribution. Then, it employs independent components analysis (ICA) instead of principal component analysis (PCA) to extract independent components from collected non-Gaussian performance metric data. For anomaly detection, it employs multi-class Bayesian classification to determine the current state of each VM. To evaluate the performance of the designed detection framework, four types of anomalies are separately or jointly injected into randomly selected VMs in a campus-wide testbed. The experimental results show that ICA-based detection mechanism outperforms PCA-based and LDA-based detection mechanisms in terms of sensitivity and specificity.


Statistics

Show / Hide Statistics

Statistics (Cumulative Counts from December 1st, 2015)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.


Cite this article

[IEEE Style]
G. Wang, J. Yang, and R. Li, "An Anomaly Detection Framework Based on ICA and Bayesian Classification for IaaS Platforms," KSII Transactions on Internet and Information Systems, vol. 10, no. 8, pp. 3865-3883, 2016. DOI: 10.3837/tiis.2016.08.024.

[ACM Style]
GuiPing Wang, JianXi Yang, , and Ren Li. 2016. An Anomaly Detection Framework Based on ICA and Bayesian Classification for IaaS Platforms. KSII Transactions on Internet and Information Systems, 10, 8, (2016), 3865-3883. DOI: 10.3837/tiis.2016.08.024.

[BibTeX Style]
@article{tiis:21195, title="An Anomaly Detection Framework Based on ICA and Bayesian Classification for IaaS Platforms", author="GuiPing Wang and JianXi Yang and and Ren Li and ", journal="KSII Transactions on Internet and Information Systems", DOI={10.3837/tiis.2016.08.024}, volume={10}, number={8}, year="2016", month={August}, pages={3865-3883}}