Network tomography is the study of a network's internal characteristics using information derived from end point data. The word tomography is used to link the field, in concept, to other processes that infer the internal characteristics of an object from external observation, as is done in magnetic resonance imaging or positron emission tomography (even though the term tomography strictly refers to imaging by slicing). The field is a recent development in electrical engineering and computer science, founded in 1996. Network tomography advocates that it is possible to map the path data takes through the Internet by examining information from "edge nodes," the computers in which the data are originated and from which they are requested.
The field is useful for engineers attempting to develop more efficient computer networks. Data derived from network tomography studies can be used to increase quality of service by limiting link packet loss and increasing routing optimization.
There have been many published papers and tools in the area of network tomography, which aim to monitor the health of various links in a network in real-time. These can be classified into loss and delay tomography. A summary can be found in  and.
Loss tomography aims to find "lossy" links in a network by sending active "probes" from various vantage points in the network or the Internet. Published work in this area (not exhaustive) includes, and.
The area of delay tomography has also attracted attention in the recent past. It aims to find link delays using end-to-end probes sent from vantage points. This can potentially help isolate links with large queueing delays caused by congestion. Related papers include one by Tsang et al.
The area of network tomography also includes that of inferring network topology using end-to-end probes. Topology discovery is a tradeoff between accuracy vs overhead. In network tomography, the emphasis is to achieve as accurate a picture of the network with minimal overhead. In comparison, other network topology discovery techniques using SNMP or Route analytics aim for greater accuracy with less emphasis on overhead reduction.
Other example applications of network tomography include finding links which are shared by multiple paths (and can thus become potential bottlenecks in the future).
- Vardi, Y. (1996). "Network Tomography: estimating source-destination traffic intensities from link data". Journal of the American Statistical Association. American Statistical Association. 91 (433): 365–377. doi:10.2307/2291416. JSTOR 2291416.
- Castro, R.; Coates, Mark; Liang, Gang; Nowak, Robert; Yu, Bin (2004). "Network Tomography: Recent Developments". Statistical Science. 19 (3): 499–517. doi:10.1214/088342304000000422.
- Coates, M.; Hero Iii, A.O.; Nowak, R.; Yu, Bin (2002). "Internet tomography". IEEE Signal Processing Magazine. 19 (3): 47–65. doi:10.1109/79.998081.
- Coates, M. (2000). "Network loss inference using unicast end-to-end measurement". Proc. ITC Seminar on IP Traffic, Measurement, and Modeling. 28.
- Duffield, N. (2001). "Inferring link loss using striped unicast probes". Ieee Infocom. 2: 915–923.
- Tsang, Y.; Coates, M.; Nowak, R.D. (2003). "Network Delay Tomography". IEEE Trans. Signal Processing. 51 (8): 2125–2136. doi:10.1109/TSP.2003.814520.
- Rubenstein, D.; Kurose, J.; Towsley, D. (2002). "Detecting shared congestion of flows via end-to-end measurement". IEEE/ACM Transactions on Networking. 10 (3): 381–395. doi:10.1109/TNET.2002.1012369.