Scipediacontent: Scipediacontent moved page Draft Content 776879481 to Reiter et al 2014a

2021-01-25T11:30:54Z

Scipediacontent moved page Draft Content 776879481 to Reiter et al 2014a

Scipediacontent: Created page with " == Abstract == Growing traffic volumes and the increasing complexity of attacks pose a constant scaling challenge for network intrusion prevention systems (NIPS). In this re..."

2021-01-25T11:30:51Z

Created page with " == Abstract == Growing traffic volumes and the increasing complexity of attacks pose a constant scaling challenge for network intrusion prevention systems (NIPS). In this re..."

New page

== Abstract ==

Growing traffic volumes and the increasing complexity of attacks pose a constant scaling challenge for network intrusion prevention systems (NIPS). In this respect, offloading NIPS processing to compute clusters offers an immediately deployable alternative to expensive hardware upgrades. In practice, however, NIPS offloading is challenging on three fronts in contrast to passive network security functions: (1) NIPS offloading can impact other traffic engineering objectives; (2) NIPS offloading impacts user perceived latency; and (3) NIPS actively change traffic volumes by dropping unwanted traffic. To address these challenges, we present the SNIPS system. We design a formal optimization framework that captures tradeoffs across scalability, network load, and latency. We provide a practical implementation using recent advances in software-defined networking without requiring modifications to NIPS hardware. Our evaluations on realistic topologies show that SNIPS can reduce the maximum load by up to 10Ã while only increasing the latency by 2%.

== Original document ==

The different versions of the original document can be found in:

* [http://www.andrew.cmu.edu/user/sfayazba/snips_iciss14.pdf http://www.andrew.cmu.edu/user/sfayazba/snips_iciss14.pdf]

* [http://link.springer.com/content/pdf/10.1007/978-3-319-13841-1_2 http://link.springer.com/content/pdf/10.1007/978-3-319-13841-1_2],
: [http://dx.doi.org/10.1007/978-3-319-13841-1_2 http://dx.doi.org/10.1007/978-3-319-13841-1_2]

* [https://link.springer.com/chapter/10.1007/978-3-319-13841-1_2 https://link.springer.com/chapter/10.1007/978-3-319-13841-1_2],
: [http://dx.doi.org/10.1007/978-3-319-13841-1_2 http://dx.doi.org/10.1007/978-3-319-13841-1_2],
: [https://rd.springer.com/chapter/10.1007/978-3-319-13841-1_2 https://rd.springer.com/chapter/10.1007/978-3-319-13841-1_2],
: [https://dblp.uni-trier.de/db/conf/iciss/iciss2014.html#HeorhiadiFRS14 https://dblp.uni-trier.de/db/conf/iciss/iciss2014.html#HeorhiadiFRS14],
: [https://academic.microsoft.com/#/detail/2269205123 https://academic.microsoft.com/#/detail/2269205123]

← Older revision	Revision as of 11:30, 25 January 2021
(No difference)

Reiter et al 2014a - Revision history

Scipediacontent: Scipediacontent moved page Draft Content 776879481 to Reiter et al 2014a

Scipediacontent: Created page with " == Abstract == Growing traffic volumes and the increasing complexity of attacks pose a constant scaling challenge for network intrusion prevention systems (NIPS). In this re..."