A scalable and dynamic acl system for in-network defense
In-network/in-switch Access Control List (ACL) is an essential security component of modern
networks. In high-speed networks, ACL rules are often placed in a switch's Ternary Content …
networks. In high-speed networks, ACL rules are often placed in a switch's Ternary Content …
Enhancing Network Attack Detection with Distributed and {In-Network} Data Collection System
SMM Mirnajafizadeh, AR Sethuram… - 33rd USENIX Security …, 2024 - usenix.org
The collection of network data poses a significant challenge for machine/deep learning-
driven network defense systems. This paper proposes a new paradigm, namely In-network …
driven network defense systems. This paper proposes a new paradigm, namely In-network …
Effective network-wide traffic measurement: A lightweight distributed sketch deployment
Network measurement is critical for various network applications, but scaling measurement
techniques to the network-wide level is challenging for existing sketch-based solutions …
techniques to the network-wide level is challenging for existing sketch-based solutions …
A survey of sketches in traffic measurement: Design, optimization, application and implementation
S Li, L Luo, D Guo, Q Zhang, P Fu - arXiv preprint arXiv:2012.07214, 2020 - arxiv.org
Network measurement probes the underlying network to support upper-level decisions such
as network management, network update, network maintenance, network defense and …
as network management, network update, network maintenance, network defense and …
Incremental server deployment for scalable NFV-enabled networks
Network Function Virtualization (NFV) is a new paradigm to enable service innovation
through virtualizing traditional network functions. To construct a new NFV-enabled network …
through virtualizing traditional network functions. To construct a new NFV-enabled network …
An AI-Augmented Kalman Filter Approach to Monitoring Network Traffic Matrix
Q Zhang, S Pan - IEEE Transactions on Network Science and …, 2023 - ieeexplore.ieee.org
Many network operations depend on traffic matrix (TM). However, how to obtain TM often
turns out as a dilemma, ie, direct measurements have a high accuracy but with a high …
turns out as a dilemma, ie, direct measurements have a high accuracy but with a high …
FlexMon: A flexible and fine-grained traffic monitor for programmable networks
Y Wang, X Wang, S Xu, C He, Y Zhang, J Ren… - Journal of Network and …, 2022 - Elsevier
Accurate and fine-grained traffic measurements are crucial for various network management
tasks. Recent researches introduce counter-based and sketch-based approaches to traffic …
tasks. Recent researches introduce counter-based and sketch-based approaches to traffic …
Incremental server deployment for software-defined NFV-enabled networks
Network Function Virtualization (NFV) is a new paradigm to enable service innovation
through virtualizing traditional network functions. To construct a new NFV-enabled network …
through virtualizing traditional network functions. To construct a new NFV-enabled network …
MimoSketch: A Framework to Mine Item Frequency on Multiple Nodes with Sketches
We abstract a MIMO scenario in distributed data stream mining, where a stream of multiple
items is mined by multiple nodes. We design a framework named MimoSketch for the MIMO …
items is mined by multiple nodes. We design a framework named MimoSketch for the MIMO …
Server-Assisted Traffic Measurement for Programmable Data Center Networks
J Ren, Y Wang, Y Liu, X Wang… - IEEE Transactions on …, 2024 - ieeexplore.ieee.org
The daily management of today's data centers relies on traffic measurement, which offers
essential information for various tasks. The emergence of the programmable networking …
essential information for various tasks. The emergence of the programmable networking …