Ιδρυματικό Αποθετήριο
Πολυτεχνείο Κρήτης
Πολυτεχνείο Κρήτης
EN
|
EL
| URI | http://purl.tuc.gr/dl/dias/CB6C5F49-03DD-49ED-BA4F-954E4F8ABCDD | - |
| Αναγνωριστικό | https://doi.org/10.3390/s21041140 | - |
| Αναγνωριστικό | https://www.mdpi.com/1424-8220/21/4/1140 | - |
| Γλώσσα | en | - |
| Μέγεθος | 21 pages | en |
| Τίτλος | Acceleration of intrusion detection in encrypted network traffic using heterogeneous hardware | en |
| Δημιουργός | Papadogiannaki Eva | en |
| Δημιουργός | Ioannidis Sotirios | en |
| Δημιουργός | Ιωαννιδης Σωτηριος | el |
| Εκδότης | MDPI | en |
| Περίληψη | More than 75% of Internet traffic is now encrypted, and this percentage is constantly increasing. The majority of communications are secured using common encryption protocols such as SSL/TLS and IPsec to ensure security and protect the privacy of Internet users. However, encryption can be exploited to hide malicious activities, camouflaged into normal network traffic. Traditionally, network traffic inspection is based on techniques like deep packet inspection (DPI). Common applications for DPI include but are not limited to firewalls, intrusion detection and prevention systems, L7 filtering, and packet forwarding. With the widespread adoption of network encryption though, DPI tools that rely on packet payload content are becoming less effective, demanding the development of more sophisticated techniques in order to adapt to current network encryption trends. In this work, we present HeaderHunter, a fast signature-based intrusion detection system even for encrypted network traffic. We generate signatures using only network packet metadata extracted from packet headers. In addition, we examine the processing acceleration of the intrusion detection engine using different heterogeneous hardware architectures. | en |
| Τύπος | Peer-Reviewed Journal Publication | en |
| Τύπος | Δημοσίευση σε Περιοδικό με Κριτές | el |
| Άδεια Χρήσης | http://creativecommons.org/licenses/by/4.0/ | en |
| Ημερομηνία | 2023-01-26 | - |
| Ημερομηνία Δημοσίευσης | 2021 | - |
| Θεματική Κατηγορία | Network intrusion detection | en |
| Θεματική Κατηγορία | Encrypted network traffic | en |
| Θεματική Κατηγορία | Encrypted network traffic inspection | en |
| Θεματική Κατηγορία | Network packet metadata | en |
| Θεματική Κατηγορία | GPGPUs | en |
| Θεματική Κατηγορία | Integrated GPU | en |
| Θεματική Κατηγορία | OpenCL | en |
| Βιβλιογραφική Αναφορά | E. Papadogiannaki and S. Ioannidis, “Acceleration of intrusion detection in encrypted network traffic using heterogeneous hardware,” Sensors, vol. 21, no. 4, Feb. 2021, doi: 10.3390/s21041140. | en |
Copyright © DIAS 2013
