D 2024

Identification of Device Dependencies Using Link Prediction

SADLEK, Lukáš; Martin HUSÁK and Pavel ČELEDA

Basic information

Original name

Identification of Device Dependencies Using Link Prediction

Authors

SADLEK, Lukáš; Martin HUSÁK and Pavel ČELEDA

Edition

Seoul, South Korea, PROCEEDINGS OF 2024 IEEE/IFIP NETWORK OPERATIONS AND MANAGEMENT SYMPOSIUM, NOMS 2024, p. 1-10, 10 pp. 2024

Publisher

IEEE Xplore Digital Library

Other information

Language

English

Type of outcome

Proceedings paper

Country of publisher

United States of America

Confidentiality degree

is not subject to a state or trade secret

Publication form

electronic version available online

Marked to be transferred to RIV

No

Organization

Fakulta informatiky – Repository – Repository

ISBN

979-8-3503-2794-6

ISSN

DOI

https://doi.org/10.1109/NOMS59830.2024.10575713

UT WoS

001270140300175

Keywords in English

device dependency;link prediction;dependency embedding;network traffic analysis;graph-based analysis;random walk

Links

EH22_010/0003229, research and development project. MUNI/A/1586/2023, interní kód Repo.
Changed: 26/3/2025 00:50, RNDr. Daniel Jakubík

Abstract

In the original language

Devices in computer networks cannot work without essential network services provided by a limited count of devices. Identification of device dependencies determines whether a pair of IP addresses is a dependency, i.e., the host with the first IP address is dependent on the second one. These dependencies cannot be identified manually in large and dynamically changing networks. Nevertheless, they are important due to possible unexpected failures, performance issues, and cascading effects. We address the identification of dependencies using a new approach based on graph-based machine learning. The approach belongs to link prediction based on a latent representation of the computer network’s communication graph. It samples random walks over IP addresses that fulfill time conditions imposed on network dependencies. The constrained random walks are used by a neural network to construct IP address embedding, which is a space that contains IP addresses that often appear close together in the same communication chain (i.e., random walk). Dependency embedding is constructed by combining values for IP addresses from their embedding and used for training the resulting dependency classifier. We evaluated the approach using IP flow datasets from a controlled environment and university campus network that contain evidence about dependencies. Evaluation concerning the correctness and relationship to other approaches shows that the approach achieves acceptable performance. It can simultaneously consider all types of dependencies and is applicable for batch processing in operational conditions.
Displayed: 2/5/2026 21:19