Communities of interest (COI) have been applied in a variety of environments ranging from characterizing the online buying behavior of individuals to detecting fraud in telephone networks. The common thread among these applications is that the historical COI of an individual can be used to predict future behavior as well as the behavior of other members of the COI. It would clearly be beneficial if COIs can be used in the same manner to characterize and predict the behavior of hosts within a data network. In this paper, we introduce a methodology for evaluating various aspects of COIs of hosts within an IP network. In the context of this study, we broadly define a COI as a collection of interacting hosts. We apply our methodology using data collected from a large enterprise network over a eleven week period. First, we study the distributions and stability of the size of COIs. Second, we evaluate multiple heuristics to determine a stable core set of COIs and determine the stability of these sets over time. Third, we evaluate how much of the communication is not captured by these core COI sets.
[1]
Andrew Tomkins,et al.
The Web and Social Networks
,
2002,
Computer.
[2]
Corinna Cortes,et al.
Communities of interest
,
2001,
Intell. Data Anal..
[3]
Jon M. Kleinberg,et al.
The small-world phenomenon: an algorithmic perspective
,
2000,
STOC '00.
[4]
M Girvan,et al.
Structure of growing social networks.
,
2001,
Physical review. E, Statistical, nonlinear, and soft matter physics.
[5]
Theodore Johnson,et al.
Gigascope: a stream database for network applications
,
2003,
SIGMOD '03.
[6]
M. Frans Kaashoek,et al.
Proceedings of the General Track: 2003 Usenix Annual Technical Conference Role Classification of Hosts within Enterprise Networks Based on Connection Patterns
,
2022
.