Rule Discovery in Telecommunication Alarm Data

Fault management is an important but difficultarea of telecommunication network management: networksproduce large amounts of alarm information which must beanalyzed and interpreted before faults can be located. So called alarm correlation is acentral technique in fault identification. While the useof alarm correlation systems is quite popular andmethods for expressing the correlations are maturing, acquiring all the knowledge necessary forconstructing an alarm correlation system for a networkand its elements is difficult. We describe a novelpartial solution to the task of knowledge acquisition for correlation systems. We present a methodand a tool for the discovery of recurrent patterns ofalarms in databases; these patterns, episode rules, canbe used in the construction of real-time alarm correlation systems. We also present tools withwhich network management experts can browse the largeamounts of rules produced. The construction ofcorrelation systems becomes easier with these tools, as the episode rules provide a wealth ofstatistical information about recurrent phenomena in thealarm stream. This methodology has been implemented ina research system called TASA, which is used by several telecommunication operators. We briefly discussexperiences in the use of TASA.

[1]  Fabrizio Luccio,et al.  Simple and Efficient String Matching with k Mismatches , 1989, Inf. Process. Lett..

[2]  Charles L. Forgy,et al.  Rete: a fast algorithm for the many pattern/many object pattern match problem , 1991 .

[3]  Willi Klösgen,et al.  A Support System for Interpreting Statistical Data , 1991, Knowledge Discovery in Databases.

[4]  David R. Karger,et al.  Scatter/Gather: a cluster-based approach to browsing large document collections , 1992, SIGIR '92.

[5]  Philip Laird,et al.  Identifying and Using Patterns in Sequential Data , 1993, ALT.

[6]  G. Jakobson,et al.  Alarm correlation , 1993, IEEE Network.

[7]  Tomasz Imielinski,et al.  Mining association rules between sets of items in large databases , 1993, SIGMOD Conference.

[8]  Martin Paterok,et al.  Event Correlation in Heterogeneous Networks Using the OSI Management Framework , 1993, Integrated Network Management.

[9]  Gregory Piatetsky-Shapiro,et al.  The interestingness of deviations , 1994 .

[10]  Kaizhong Zhang,et al.  Combinatorial pattern discovery for scientific data: some preliminary results , 1994, SIGMOD '94.

[11]  Heikki Mannila,et al.  Finding interesting rules from large sets of discovered association rules , 1994, CIKM '94.

[12]  Joseba Quevedo,et al.  TIGER: real-time situation assessment of dynamic systems , 1994 .

[13]  Mark Weissman,et al.  Real-time telecommunication network management: extending event correlation with temporal constraints , 1995, Integrated Network Management.

[14]  D. Higgins,et al.  Finding flexible patterns in unaligned protein sequences , 1995, Protein science : a publication of the Protein Society.

[15]  Ramakrishnan Srikant,et al.  Mining sequential patterns , 1995, Proceedings of the Eleventh International Conference on Data Engineering.

[16]  Heikki Mannila,et al.  Pruning and grouping of discovered association rules , 1995 .

[17]  Rodney M. Goodman,et al.  NOAA: an expert system managing the telephone network , 1995, Integrated Network Management.

[18]  Yossi A. Nygate,et al.  Event correlation using rule and object based techniques , 1995, Integrated Network Management.

[19]  Sushil Jajodia,et al.  Testing complex temporal relationships involving multiple granularities and its application to data mining (extended abstract) , 1996, PODS.

[20]  Heikki Mannila,et al.  Verkamo: Fast Discovery of Association Rules , 1996, KDD 1996.

[21]  Jan M. Zytkow,et al.  From Contingency Tables to Various Forms of Knowledge in Databases , 1996, Advances in Knowledge Discovery and Data Mining.

[22]  Paul R. Cohen,et al.  Searching for Structure in Multiple Streams of Data , 1996, ICML.

[23]  Gregory Piatetsky-Shapiro,et al.  Selecting and reporting What Is Interesting , 1996, Advances in Knowledge Discovery and Data Mining.

[24]  Heikki Mannila,et al.  Fast Discovery of Association Rules , 1996, Advances in Knowledge Discovery and Data Mining.

[25]  Dimitrios Gunopulos,et al.  Episode Matching , 1997, CPM.

[26]  Markus Trommer,et al.  Distributed Network Management with Dynamic Rule-based Managing Agents , 1997, Integrated Network Management.

[27]  Jörg Rech,et al.  Knowledge Discovery in Databases , 2001, Künstliche Intell..

[28]  Heikki Mannila,et al.  Discovery of Frequent Episodes in Event Sequences , 1997, Data Mining and Knowledge Discovery.

[29]  D. Tipper,et al.  Towards Fault Recovery and Management in Communication Networks , 2004, Journal of Network and Systems Management.

[30]  Gregory Piatetsky-Shapiro,et al.  Advances in Knowledge Discovery and Data Mining , 2004, Lecture Notes in Computer Science.

[31]  Willi Klösgen,et al.  Efficient discovery of interesting statements in databases , 2004, Journal of Intelligent Information Systems.

[32]  Seraphin B. Calo,et al.  Distributed fault identification in telecommunication networks , 2005, Journal of Network and Systems Management.