Re: [Idnet] IETF99 for applying AI/ML into network management: Follow-up

Jérôme François <jerome.francois@inria.fr> Wed, 26 July 2017 04:50 UTC

Return-Path: <jerome.francois@inria.fr>
X-Original-To: idnet@ietfa.amsl.com
Delivered-To: idnet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A9063129B6A for <idnet@ietfa.amsl.com>; Tue, 25 Jul 2017 21:50:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level:
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4PDjc45dsvsb for <idnet@ietfa.amsl.com>; Tue, 25 Jul 2017 21:50:37 -0700 (PDT)
Received: from mail3-relais-sop.national.inria.fr (mail3-relais-sop.national.inria.fr [192.134.164.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84C66129B3A for <idnet@ietf.org>; Tue, 25 Jul 2017 21:50:34 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="5.40,413,1496095200"; d="scan'208";a="232806805"
Received: from unknown (HELO [192.168.43.145]) ([80.12.34.125]) by mail3-relais-sop.national.inria.fr with ESMTP/TLS/DHE-RSA-AES128-SHA; 26 Jul 2017 06:50:31 +0200
To: Pedro Martinez-Julia <pedro@nict.go.jp>
References: <015d4fb0-496a-a9a0-e8c5-7fcf6c52caee@inria.fr> <20170720171907.GF15832@spectre> <6AE399511121AB42A34ACEF7BF25B4D29783BD@DGGEMM505-MBS.china.huawei.com> <20170721091729.GJ15832@spectre> <6AE399511121AB42A34ACEF7BF25B4D29786F4@DGGEMM505-MBS.china.huawei.com> <dd2c0ecc-fb5b-65d8-ae0b-5a0eb47d64c1@inria.fr> <20170726001209.GY18300@spectre>
Cc: idnet@ietf.org
From: =?UTF-8?B?SsOpcsO0bWUgRnJhbsOnb2lz?= <jerome.francois@inria.fr>
Message-ID: <be7a4196-8065-0007-8e1d-f778b996a24b@inria.fr>
Date: Wed, 26 Jul 2017 06:50:29 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <20170726001209.GY18300@spectre>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/idnet/v7FdXZSMUbFPRWDqqhpUjlkWI9M>
Subject: Re: [Idnet] IETF99 for applying AI/ML into network management: Follow-up
X-BeenThere: idnet@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "The IDNet \(Intelligence-Defined Network\) " <idnet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idnet>, <mailto:idnet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idnet/>
List-Post: <mailto:idnet@ietf.org>
List-Help: <mailto:idnet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idnet>, <mailto:idnet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Jul 2017 04:50:39 -0000

Hi Pedro,

Le 26/07/2017 à 02:12, Pedro Martinez-Julia a écrit :
> On Tue, Jul 25, 2017 at 04:28:08PM +0200, Jérôme François wrote:
>> I'm not sure wheter the external data loop should be linked to the brain
>> or data analysis or both.
> It is supposed to be already analyzed (not raw data but events), so it
> is better to be inputted to the brain.
Assuming the case where you have flow records (raw event) you want to
label regarding the matching of IP addresses in external blacklists, I
would say it has to be done to the data analysis.

jerome
>> jerome
> Regards,
> Pedro
>