Inferring Packet Processing Behavior Using Input/Output Monitors

Author

Chasaki, Danai ; Wu, Qiang ; Wolf, Tilman

Author_Institution

Dept. of Electr. & Comput. Eng., Univ. of Massachusetts, Amherst, MA, USA

fYear

2011

fDate

3-4 Oct. 2011

Firstpage

91

Lastpage

92

Abstract

Programmable packet processors have replaced traditional fixed-function custom logic in the data path of routers. This programmability introduces new vulnerabilities in these systems that can lead to new types of network attacks. We propose a modular packet processor monitoring technique that can help in detecting and avoiding such attacks. Using information about the processing time distribution of individual modules, input/output traffic characteristics can be inferred and abnormal behavior can be detected.

Keywords

computer network security; multiprocessing systems; fixed-function custom logic; input/output monitors; modular packet processor monitoring technique; network attacks; programmable packet processors; Computers; Delay; Manganese; Monitoring; Program processors; Routing protocols; Security; Algorithm design and analysis; Network Anomaly Detection; Network Management; Real-time embedded systems; Streaming Algorithms;

fLanguage

English

Publisher

ieee

Conference_Titel

Architectures for Networking and Communications Systems (ANCS), 2011 Seventh ACM/IEEE Symposium on

Conference_Location

Brooklyn, NY

Print_ISBN

978-1-4577-1454-2

Electronic_ISBN

978-0-7695-4521-9

Type

conf

DOI

10.1109/ANCS.2011.23

Filename

6062719