CAREER: Architectural Support for Online Security Analysis

摘要现代计算机系统设计面临的一个紧迫问题是如何确保连接到网络的计算机安全不受攻击。该研究将调查使新一代网络安全设备能够检测可疑网络行为和已知攻击的计算机体系结构。几种不同的安全应用程序的特点是需要频繁地访问和维护每个字节或数据包上的大量状态，例如大型查找表，以及吞吐量的最坏情况界限。我们的架构将利用许多小的、宽字的片上存储器来快速遍历大型图形结构，这些结构在当前现有的或拟议的机器上不受很好的支持。这种方法可以显著减少内存使用并提高吞吐量。这样的架构可能导致新一代设备能够显著减少病毒、蠕虫和恶意攻击造成的损害。功能原型的开发将使研究人员和学生能够研究受到攻击的网络的内部动态，以及它所带来的架构挑战。

CAREER: Architectural Support for Online Security AnalysisAbstractA pressing problem facing modern computer system design is how to ensure that computers connected to the network are safe from attack. The research will investigate computer architectures that enable a new generation of network security devices capable of detecting suspicious network behavior and known attacks. Several different security applications are characterized by requiring the frequent access and maintenance of large amounts of state, such as large lookup tables, on every byte or packet, with worst-case bounds on throughput. Our architecture will take advantage of many small, wide word, on-chip memories to rapidly traverse large graph structures that are not well supported on current existing or proposed machines. This approach results in significant reduction in memory usage and increase in throughput. Such architecture could result in a new generation of devices capable of significantly reducing the damages caused by viruses, worms, and malicious attacks. The development of a functional prototype will enable both researchers and students to study the internal dynamics a network under attack, and the architectural challenges it presents.