Proceedings Article10.1109/ISDFS.2016.7473518
Graphics processing unit based next generation DDoS prevention system
Selcuk Keskin,Hasan Tugrul Erdogan,Taskin Kocak +2 more
- 25 Apr 2016
- pp 59-62
3
TL;DR: A massively parallel computation approach of Graphics Processing Unit (GPU) that can be used for network connection tracking that achieves 90,000,000 packets per second (pps) throughput which is 35 times faster than the packet filtering function defined in Linux kernel.
read more
Abstract: Packet filtering is the main component of prevention systems to protect the network system of the devices against attacks. The algorithm allows the packets to access to network after passing some rules. The packets with decisions are written into a connection table that consists of essential network information. In this paper, we design and implement a massively parallel computation approach of Graphics Processing Unit (GPU) that can be used for network connection tracking. The results show that the GPU based connection table tracking algorithms achieve 90,000,000 packets per second (pps) throughput which is 35 times faster than the packet filtering function defined in Linux kernel.
read more
Chat with Paper
AI Agents for this Paper
Find similar papers on Google Scholar, PubMed and Arxiv
Write a critical review of this paper
Analyze citations of this paper to find unaddressed research gaps
Citations
An Adaptive and Lightweight Solution to Detect Mixed Rate IP Spoofed DDoS Attack in IoT Ecosystem
Pradeepkumar Bhale,Santosh Biswas,Sukumar Nandi +2 more
- 01 Dec 2018
TL;DR: An adaptive and lightweight solution which detects and mitigates the mixed rate IP spoofed DDoS attack in the IoT ecosystem and the experimental results show that the solution is adaptive and is able to identify the attack with 99.1% accuracy.
4
Forensic Model for DDoS Attack
Yun Luo,Xiao Fu,Bin Luo,Xiaojiang Du,Mohsen Guizani +4 more
- 01 Dec 2020
TL;DR: In this article, a forensic model using NS2 to simulate the connectivity of real nodes in the network and uses Botnet and DDoS attack electronic evidence analysis methods is introduced to identify the hidden details from DDoS attacks.
Opencl i̇le fpga üzeri̇nde güvenli̇k duvarinin gerçeklenmesi̇
Tuna Göksu,Mohammed Ridha Faisal +1 more
- 30 Aug 2019
TL;DR: In this article, Bilgisayar et al. discuss the problem of IPv6 paketleri in OpenCL and FPGA and propose a solution to solve it.
References
DDoS attacks and defense mechanisms: classification and state-of-the-art
TL;DR: The goal of the paper is to place some order into the existing attack and defense mechanisms, so that a better understanding of DDoS attacks can be achieved and subsequently more efficient and effective algorithms, techniques and procedures to combat these attacks may be developed.
777
Real-time parallel hashing on the GPU
Dan A. Alcantara,Andrei Sharf,Fatemeh Abbasinejad,Shubhabrata Sengupta,Michael Mitzenmacher,John D. Owens,Nina Amenta +6 more
- 01 Dec 2009
TL;DR: An efficient data-parallel algorithm for building large hash tables of millions of elements in real-time, which considers a classical sparse perfect hashing approach, and cuckoo hashing, which packs elements densely by allowing an element to be stored in one of multiple possible locations.
Distributed Denial of Service Prevention Techniques
TL;DR: A classification of available mechanisms that are proposed in literature on preventing Internet services from possible DDoS attacks and discuss the strengths and weaknesses of each mechanism is presented in this paper, which provides better understanding of the problem and enables a security administrator to effectively equip his arsenal with proper prevention mechanisms for fighting against DDoS threat.
IP routing processing with graphic processors
Shuai Mu,Xinya Zhang,Nairen Zhang,Jiaxin Lu,Yangdong Steve Deng,Shu Zhang +5 more
- 08 Mar 2010
TL;DR: This work suggests that, with proper architectural modifications, GPU based software routers could deliver significant higher throughput than previous CPU based solutions.
70
Hadoop Based Defense Solution to Handle Distributed Denial of Service (DDoS) Attacks
TL;DR: A novel scheme is proposed to detect DDoS attack efficiently by using MapReduce programming model and to provide a timeline of defense mechanism with their improvements to combat DDoS attacks.