Inferring Packet Processing Behavior Using Input/Output Monitors

Authors:
Danai Chasaki;Qiang Wu;Tilman Wolf
Affiliations:
-;-;-
Venue:
Proceedings of the 2011 ACM/IEEE Seventh Symposium on Architectures for Networking and Communications Systems
Year:
2011

Citing 3
Cited 1

The click modular router

ACM Transactions on Computer Systems (TOCS)
In-network services for customization in next-generation networks

IEEE Network: The Magazine of Global Internetworking
Design of a secure packet processor

Proceedings of the 6th ACM/IEEE Symposium on Architectures for Networking and Communications Systems

Securing multi-core multi-threaded packet processors

Proceedings of the eighth ACM/IEEE symposium on Architectures for networking and communications systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

Programmable packet processors have replaced traditional fixed-function custom logic in the data path of routers. This programmability introduces new vulnerabilities in these systems that can lead to new types of network attacks. We propose a modular packet processor monitoring technique that can help in detecting and avoiding such attacks. Using information about the processing time distribution of individual modules, input/output traffic characteristics can be inferred and abnormal behavior can be detected.