Towards Efficient Traffic Monitoring for Science DMZ with Side-Channel based Traffic Winnowing

Towards Efficient Traffic Monitoring for Science DMZ with Side-Channel based Traffic Winnowing
复制标题

利用基于侧信道的流量风选实现科学 DMZ 的高效流量监控

DOI:
10.1145/3180465.3180474
复制
发表时间:
2018
期刊:
ACM International Workshop on Security in Software Defined Networks and Network Function Virtualization
影响因子:
--
通讯作者:
Brooks, Richard R.
Brooks, Richard R.
中科院分区:
--
文献类型:
--
作者:
Li, Hongda;Zhang, Fuqiang;Yu, Lu;Oakley, Jon;Hu, Hongxin;Brooks, Richard R.

文献摘要

参考文献

被引文献

相似文献

随着数据密集型科学成为许多科学领域的常态,高性能数据传输正迅速成为核心科学基础设施的要求。为了满足这样的要求,在大学校园内部署科学DMZ的人数迅速增长。然而,由于传统的入侵检测系统(IDS)配备了深度数据包检测(DPI),这是消耗资源的,因此有效地监控科学DMZ中的流量是具有挑战性的。我们建议开发一个轻量级的侧通道为基础的异常检测系统的流量筛选,以减少流量的IDS最终监测。我们评估我们的方法在科学DMZ环境中的实验的基础上。我们的评估表明,我们的方法可以显着减少科学DMZ的流量监控的资源使用。
As data-intensive science becomes the norm in many fields of science, high-performance data transfer is rapidly becoming a core scientific infrastructure requirement. To meet such a requirement, there has been a rapid growth across university campus to deploy Science DMZs. However, it is challenging to efficiently monitor the traffic in Science DMZ because traditional intrusion detection systems (IDSes) are equipped with deep packet inspection (DPI), which is resource-consuming. We propose to develop a lightweight side-channel based anomaly detection system for traffic winnowing to reduce the volume of traffic finally monitored by the IDS. We evaluate our approach based on the experiments in a Science DMZ environment. Our evaluation demonstrates that our approach can significantly reduce the resource usage in traffic monitoring for Science DMZ.
DOI: 10.1109/psc.2015.7101704
发表时间: 2015
期刊: 2015 Clemson University Power Systems Conference (PSC)
影响因子: --
作者:
Xingsi Zhong;A. Ahmadi;Richard R. Brooks;G. Venayagamoorthy;Lu Yu;Yu Fu
通讯作者: Yu Fu
用于管理科学 DMZ 加速流量的广域覆盖网络
DOI: 10.1109/iccnc.2014.6785344
发表时间: 2014
期刊: 2014 International Conference on Computing, Networking and Communications (ICNC)
影响因子: --
作者:
P. Calyam;Alex Berryman;Erik Saule;H. Subramoni;P. Schopis;G. Springer;Ümit V. Çatalyürek;D. Panda
通讯作者: D. Panda