Having a large number of device connections provides attackers with multiple ways to attack
a network. This situation can lead to distributed denial-of-service (DDoS) attacks, which can …

Home networks increasingly support important networked applications with limited
professional network administration support, while sophisticated attacks pose enormous …

Software-defined networking (SDN) and network function virtualization (NFV) processed in
multi-access edge computing (MEC) cloud systems have been proposed as critical …

An intrusion detection system (IDS) checks the content of headers and payload of packets to
detect intrusions from the network. It is an essential function for network security …

In this paper, we explain that container engines are strengthening their isolation
mechanisms. Therefore, non-intrusive monitoring becomes a must-have for the performance …

Next-generation networks are expected to combine advanced physical and digital
technologies in super-high-speed connected system infrastructures, gaining critical …

High packet rates at≥ 10 GBit/s challenge the packet processing performance of network
stacks. A common solution is to offload (parts of) the user-space packet processing to other …

The SYN flood attack is a common attack strategy as part of Distributed Denial-of-Service,
which steadily becomes more frequent and of higher volume. To defend against SYN floods …

Driven by increasing in the demand for cloud computing, cloud providers are constantly
seeking configuration mechanisms designed to simply install a reliable and easy-to-manage …

Operating system (OS) extensions are more popular than ever. For example, Linux BPF is
marketed as a" superpower" that allows user programs to be downloaded into the kernel …