ContinuousMonitoringofTop-kQueriesoverSlidingWind.pptVIP

Continuous Monitoring of Top-k Queries over Sliding Windows Authors: Kyriakos Mouratidis, Spiridon Bakiras Dimitris Papadias Presenter: Kamiru Outline Motivation Problem Setting Related Works Top-k Queries Skyband Solutions Top-k Computation Maintenance Module Skyband Monitoring Algorithm Experimental Evaluation Conclusion Future Works Motivation We define the top-k query first: Given a dataset P and a preference function f, a top-k query retrieves the k tuples in P with the highest scores according to f. One real life application is: find the top 5 hotels with the following preference function f(hotel) = -hotel.price + hotel.quality Motivation Existing methods are not applicable to streaming environment The internet traffic flow monitoring is one real life application for the streaming case. The data on the internet have very high data rate Each tuple may include Source IP address, destination IP address, start time, end time, MTU, TTL…etc. Motivation The availability of such records traffic estimation network security troubleshooting For instance, top-k query helps the system to prevent the DDoS (Distributed Denial of Service) attack if it monitors the top-k flows with the largest individual throughput in real time Motivation The server 155.223.2.4 has higher chance to have DDoS attack than 155.223.2.3 on this network. Problem Setting A function f is increasingly monotone on dimension xi if for any pair of tuples (points) p1, p2 with p1.xi≥p2.xi and p1.xj=p2.xj ?j!=i we have score(p1)≥score(p2), where score(pi)=f(p1.x1,…,pn.xn) The decreasingly monotone can be defined as the same with the reverse operation (≤). Problem Setting Notice that a function may be increasingly monotone on some dimensions, and decreasingly monotone on the remaining. For instance, f(p)=p.x1–p.x2, f is increasingly monotone on x1 and decreasingly monotone on x2 Problem Setting Problem definition: Given a set of queries Q and a set of points P. The top-k results (Rq) of query q?Q are {Rq