Abstract | ||
---|---|---|
In this work, we present a highly scalable network intrusion detection system on many-core processors. To maximize the NIDS performance, we take advantage of the underlying hardware and adhere to four design principles: shared-nothing architecture, computation offoading, lightweight data structure, and flow offoading. Through the experimental results, we find that our design choices can significantly improve the NIDS performance (79 Gbps with 1514B synthetic packets). We believe that our design decisions can be easily extended to other many-core processors and programmable NICs.
|
Year | DOI | Venue |
---|---|---|
2015 | 10.1109/ANCS.2015.7110135 | Architectures for Networking and Communications Systems |
Keywords | Field | DocType |
many-core,network intrusion detection system,parallel,offloading | Data structure,Host-based intrusion detection system,Architecture,Computer science,Network packet,Real-time computing,Computation offloading,Pattern matching,Intrusion detection system,Scalability | Conference |
ISBN | Citations | PageRank |
978-1-4673-6632-8 | 1 | 0.35 |
References | Authors | |
17 | 5 |
Name | Order | Citations | PageRank |
---|---|---|---|
Jaehyun Nam | 1 | 7 | 2.21 |
Muhammad Asim Jamshed | 2 | 135 | 6.57 |
Byungkwon Choi | 3 | 11 | 2.61 |
Dongsu Han | 4 | 994 | 48.46 |
KyoungSoo Park | 5 | 1198 | 73.47 |