Novel Global Troubleshooting Framework fo Encrypted Traffic
Van Tong, Sami Souihi, Hai Anh Tran, Abdelhamid Mellouk · 2023
In this chapter, the authors present a novel troubleshooting architecture in the context of encrypted traffic and then present a proof of concept of this architecture in a software-defined networking environment. The traditional troubleshooting architecture designed for non-encrypted traffic contains four essential modules: data collection, anomaly detection, root cause analysis and remediation. In this architecture, after detecting anomalies in the anomaly detection, its root cause will be identified in the root cause analysis module. Data collection plays a vital role in network troubleshooting. This is explained by the fact that the anomaly and its root causes result in a fluctuation of data collected in the network. The authors also present several kinds of data classification, monitoring tools, and the parameter measurement module, which collects data for network troubleshooting. There are several troubleshooting datasets related to troubleshooting tickets, network parameters in network function virtualization, etc.