Software Engineering Meets Network Engineering: Conceptual Model for Events Monitoring and Logging

TL;DR

This paper introduces a novel abstract modeling approach using the 'thinging machine' (TM) to represent and analyze network monitoring systems, aiming to improve systemization and maintainability in network management.

Contribution

It applies the TM methodology from software engineering to model network monitoring, providing a unified theoretical framework for representing network events and behaviors.

Findings

TM model effectively captures network monitoring processes.

Application to a real enterprise network demonstrates TM's feasibility.

Model enhances understanding and systematization of network monitoring.

Abstract

Abstraction applied in computer networking hides network details behind a well-defined representation by building a model that captures an essential aspect of the network system. Two current methods of representation are available, one based on graph theory, where a network node is reduced to a point in a graph, and the other the use of non-methodological iconic depictions such as human heads, walls, towers or computer racks. In this paper, we adopt an abstract representation methodology, the thinging machine (TM), proposed in software engineering to model computer networks. TM defines a single coherent network architecture and topology that is constituted from only five generic actions with two types of arrows. Without loss of generality, this paper applies TM to model the area of network monitoring in packet-mode transmission. Complex network documents are difficult to maintain and are not guaranteed to mirror actual situations. Network monitoring is constant monitoring for and alerting of malfunctions, failures, stoppages or suspicious activities in a network system. Current monitoring systems are built on ad hoc descriptions that lack systemization. The TM model of monitoring presents a theoretical foundation integrated with events and behavior descriptions. To investigate TM modeling s feasibility, we apply it to an existing computer network in a Kuwaiti enterprise to create an integrated network system that includes hardware, software and communication facilities. The final specifications point to TM modeling s viability in the computer networking field.