Towards Accelerating Intrusion Detection Operations at the Edge Network usin...

杨利霞

Towards Accelerating Intrusion Detection

1 f% n* O3 G7 x/ [" B% j

Operations at the Edge Network using FPGAs

, d; v) p. l/ S6 U" N  v1 i
In the current paper, we present our work towards
accelerating intrusion detection operations at the edge network
using FPGAs. Cloud computing and network function
virtualization have led to a new appealing paradigm for service
! t- F) `. t/ i0 ydelivery and management. Unfortunately, this paradigm fails
to correctly support IoT applications and services that seek
better communication platforms. Security as a Service can also
be seen as a cloud-based model that needs to be accommodated
to fulfill these services requirements. Again, one of the main
issues to be addressed in this context is how to improve the
9 y" B  m6 p* @5 [# t& q/ Gperformance of such systems or services in order to make them
6 J. |+ |! ]' _" g& i: X1 Jcapable of coping with the huge amount of data while
remaining reliable. A potential solution is the FPGA based
edge computing, which is a powerful combination offering
FPGA acceleration capabilities together with edge and fog
benefits. Indeed, our work focusses on devising an Intrusion
Prevention architecture called FORTISEC (40SEC), that is
% }6 E4 ~! [+ t* R2 {; L1 Bmeant to operate in a completely softwarized as well as in an
) [, i+ [3 _1 k( FFPGA mode. Thereby, we present suitable algorithms, design
principles and well defined components towards the
implementation of accelerated intrusion prevention on the
edge. We also present a testbed being utilized for the
: D. K* J  W- S# W$ q5 bimplementation of 40SEC and its performance testing.