Architektury a softwarové vybavení pro vysokorychlostní zpracování síťového provozu

Architectures and software for high-speed network traffic processing

software

In order to use the result by another entity, it is always necessary to acquire a license

The licensor requires a license fee for the result

Cabal Jakub, Ing.
Matoušek Jiří, Ing., Ph.D. (DCSY)
Špinler Martin, Ing.
Košař Vlastimil, Ing., Ph.D. (DCSY)
Fukač Tomáš, Ing. (DCSY)
Gurka Oliver, Bc. (DCSY)
Šišmiš Lukáš, Ing. (DCSY)
Martínek Tomáš, doc. Ing., Ph.D. (DCSY)
Kořenek Jan, doc. Ing., Ph.D. (DCSY)

FPGA; encrypted traffic analysis; connection tracking table; machine learning

It is a software module for FPGA technology that provides efficient feature extraction from network traffic to enable encrypted traffic analysis and classification using machine learning techniques. The core of the software module is a connection tracking table, which allows the control of packet processing at the network flow level and aggregates statistics for IPFIX monitoring and classifiers created by machine learning techniques. Due to the well-designed architecture, the set of statistics can be changed easily. The module utilizes the network traffic characteristics and optimizes communication with the external DRAMs to achieve high speed. The module has been designed and implemented to be integrated into probes with FPGA SmartNICs and can be used for networks with up to 400Gbps speed.

Interní - k využití výsledku je třeba vždy získat licenci.

Flow-based Encrypted Traffic Analysis, MV, Strategická podpora rozvoje bezpečnostního výzkumu ČR 2019–2025 (IMPAKT 1) PODPROGRAMU 1 SPOLEČNÉ VÝZKUMNÉ PROJEKTY (BV IMP1/2VS), VJ02010024, 2022-2025, running

Accelerated Network Technologies Research Group (RG ANT)

Department of Computer Systems (DCSY)