Loading...
Please wait, while we are loading the content...
Similar Documents
Overcoming performance collapse for 100Gbps cyber security
| Content Provider | ACM Digital Library |
|---|---|
| Author | Ros-Giralt, Jordi Commike, Alan Rotsted, Bob |
| Abstract | In this paper, we present a series of performance tests carried out on R-Scope Dominate-T (RDT), a 1U network security appliance configured with four Tilera Gx-36 processors and with an aggregated network IO capacity of 160Gbps. RDT is optimized with several high-performance computing techniques. On the software side, RDT runs Linux and a modified version of Bro--the open source network security monitor developed by the International Computer Science Institute--optimized with (1) intelligent IDS-aware packet queuing, (2) Bro-programmable packet shunting, (3) zero-locking IPC data structures, and (4) layer-4 packet prioritization. On the hardware side, the system leverages a many-core architecture with (1) 144 cores servicing 16 x 10Gbps network interfaces, (2) an on-chip ASIC-assisted engine delivering packets directly to Bro at wire rates, and (3) core-programmable zero-overhead/zero-interrupt Linux. The objective of this work is to make a contribution towards maximizing the amount of cyber security intelligence that a system can detect per unit of cost, where cost includes the processing time, space, energy, and capital equipment expenses incurred to perform such detection. |
| Starting Page | 15 |
| Ending Page | 22 |
| Page Count | 8 |
| File Format | |
| ISBN | 9781450319843 |
| DOI | 10.1145/2465808.2465811 |
| Language | English |
| Publisher | Association for Computing Machinery (ACM) |
| Publisher Date | 2013-06-18 |
| Publisher Place | New York |
| Access Restriction | Subscribed |
| Subject Keyword | Cyber-security |
| Content Type | Text |
| Resource Type | Article |
