Architektury a softwarové vybavení pro vysokorychlostní zpracování síťového provozu

Architectures and software for high-speed network traffic processing

software

In order to use the result by another entity, it is always necessary to acquire a license

The licensor requires a license fee for the result

Cabal Jakub, Ing.
Matoušek Jiří, Ing., Ph.D. (DCSY)
Špinler Martin, Ing.
Košař Vlastimil, Ing., Ph.D. (DCSY)
Fukač Tomáš, Ing., Ph.D. (DCSY)
Gurka Oliver, Bc. (FIT)
Šišmiš Lukáš, Ing. (DCSY)
Martínek Tomáš, doc. Ing., Ph.D. (DCSY)
Kořenek Jan, doc. Ing., Ph.D. (DCSY)

FPGA; encrypted traffic analysis; connection tracking table; machine learning

It is a software module for FPGA technology that provides efficient feature
extraction from network traffic to enable encrypted traffic analysis and
classification using machine learning techniques. The core of the software module
is a connection tracking table, which allows the control of packet processing at
the network flow level and aggregates statistics for IPFIX monitoring and
classifiers created by machine learning techniques. Due to the well-designed
architecture, the set of statistics can be changed easily. The module utilizes
the network traffic characteristics and optimizes communication with the external
DRAMs to achieve high speed. The module has been designed and implemented to be
integrated into probes with FPGA SmartNICs and can be used for networks with up
to 400Gbps speed.

Interní - k využití výsledku je třeba vždy získat licenci.

Flow-based Encrypted Traffic Analysis, MV, Strategická podpora rozvoje bezpečnostního výzkumu ČR 2019–2025 (IMPAKT 1) PODPROGRAMU 1 SPOLEČNÉ VÝZKUMNÉ PROJEKTY (BV IMP1/2VS), VJ02010024, start: 2022-01-01, end: 2025-06-30, running

Accelerated Network Technologies Research Group (RG ANT)

Department of Computer Systems (DCSY)