.png){kind=icon}
返回
Making DPI Engines Resilient to Algorithmic Complexity Attacks
.png){kind=icon}
PRE
AI
DOI：10.1109/TNET.2016.2518712.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
This paper starts by demonstrating the vulnerability of Deep Packet Inspection (DPI) mechanisms, which are at the core of security devices, to algorithmic complexity denial of service attacks, thus exposing a weakness in the first line of defense of enterprise networks and clouds. A system and a multi-core architecture to defend from these algorithmic complexity attacks is presented in the second part of the paper. The integration of this system with two different DPI engines is demonstrated and discussed. The vulnerability is exposed by showing how a simple low bandwidth cache-miss attack takes down the Aho-Corasick (AC) pattern matching algorithm that lies at the heart of most DPI engines. As a first step in the mitigation of the attack, we have developed a compressed variant of the AC algorithm that improves the worst case performance (under an attack). Still, under normal traffic its running-time is worse than classical AC implementations. To overcome this problem, we introduce MC2-MultiCore Architecture to Mitigate Complexity Attacks, which dynamically combines the classical AC algorithm with our compressed implementation, to provide a robust solution to mitigate this cachemiss attack. We demonstrate the effectiveness of our architecture by examining cache-miss algorithmic complexity attacks against DPI engines and show a goodput boost of up to 73%. Finally, we show that our architecture may be generalized to provide a principal solution to a wide variety of algorithmic complexity attacks.
Keyword:
Complexity attack
deep packet inspection
DoS
multi-core
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
I
IF:
3.6
论文数:
4.4K
被引数:
9.5K
机构
引用论文
.png){kind=icon}
Thyroid status in premenopausal and postmenopausal women – A biochemical study on insulin resistance in non obese, overweight and obese type 2 diabetics绝经前和绝经后女性的甲状腺状态——一项关于非肥胖、超重和肥胖2型糖尿病患者的胰岛素抵抗的生化研究
PREAI
分享收藏
分享收藏Irreversible enzyme inhibitors. CLXXIII. Cure of Walker 256 ascites by reversible and irreversible inhibitors of dihydrofolic reductase derived from 1-(substituted-phenyl)-4,6-diamino-1,2-dihydro-2,2-dimethyl-s-triazine不可逆性酶抑制剂。CLXXIII. 由1-(取代苯基)-4,6-二氨基-1,2-二氢-2,2-二甲基-s-三嗪衍生的可逆性和不可逆性二氢叶酸还原酶抑制剂对Walker 256腹水瘤的治愈。
PREAI
分享收藏
查看更多内容