Answers are grounded in this paper and cite their sources.
Today, network operators are increasingly playing the role of part-time detectives: they must routinely diagnose intricate problems and malfunctions, e.g., routing or performance issues, and they must often perform forensic investigations of past misbehavior, e.g., intrusions or cybercrimes. However, the current Internet architecture offers little direct support for them. A variety of solutions have been proposed, but each solution tends to address only one specific problem. Moreover, each solution proposes a different fix that is incompatible with the others, which complicates deployment.
No takes yet. Share an insight, caveat, or question.
Chen et al. (2017) studied this question.
Synapse has enriched 8 closely related papers on similar clinical questions. Consider them for comparative context: