Towards Accelerating Intrusion Detection Operations at the Edge Network usin...

杨利霞

Towards Accelerating Intrusion Detection

Operations at the Edge Network using FPGAs

3 q% I  s. k( S

* W$ w4 c* I# T! I6 O0 z. ^9 t7 ~
In the current paper, we present our work towards
accelerating intrusion detection operations at the edge network
using FPGAs. Cloud computing and network function
virtualization have led to a new appealing paradigm for service
delivery and management. Unfortunately, this paradigm fails
to correctly support IoT applications and services that seek
better communication platforms. Security as a Service can also
be seen as a cloud-based model that needs to be accommodated
to fulfill these services requirements. Again, one of the main
: P5 q# }) Y7 Qissues to be addressed in this context is how to improve the
performance of such systems or services in order to make them
4 @7 ]9 ?& v) j! @9 h! O0 Acapable of coping with the huge amount of data while
( t9 e$ C$ |( \remaining reliable. A potential solution is the FPGA based
2 @6 B1 H6 K% Q5 I7 h5 cedge computing, which is a powerful combination offering
0 F$ O1 B1 E8 WFPGA acceleration capabilities together with edge and fog
benefits. Indeed, our work focusses on devising an Intrusion
Prevention architecture called FORTISEC (40SEC), that is
/ w) n; @+ k; `( Y& {+ ]- G3 Zmeant to operate in a completely softwarized as well as in an
2 \* z7 A2 ^# L1 {( X! HFPGA mode. Thereby, we present suitable algorithms, design
/ f$ H2 a8 o1 t2 T8 ?: Bprinciples and well defined components towards the
# W6 t. V% L; Q! [implementation of accelerated intrusion prevention on the
edge. We also present a testbed being utilized for the
0 M9 Z  {8 V) b0 k- @" |* C5 C% F, Uimplementation of 40SEC and its performance testing.