My research is focused on computer networks with particular interests on integrating novel architecture & functionality into network systems. We work on topics related to embedded design for network security and traffic measurement on FPGA and Network Processors.
High-Speed Packet Processing & Measurement
Traffic analysis and measurement are important tasks for the proper
operation of IP networks. The accurate estimation of Internet traffic
statistics serves as the basis for infrastructure planning, network
provisioning, capacity forecasting and accounting. Anomaly detection on
worm distribution and prevention of distributed denial of service
(DDoS) attacks are also based on the same information. However, as
network bandwidth grows exponentially, the scaling of monitoring and
measuring capabilities for collecting accurate statistics becomes a
critical issue. Hash-based algorithms are very useful and popular
techniques adopted in many high-speed router design. We are exploring
these advanced techniques with hardware and architecture support for
data reduction and synopsis construction.Sketch-guided Filtering Support for Superspreaders Detection
A sketch-guided filtering scheme for assisting superspreader detection in the measurement of high-speed network traffic is proposed. The scheme comprises of an array of linear-counting sketches that rapidly eliminates flows with potentially low fan-out during a measurement interval. Based on the results of simulations obtained using realworld network traces, the filter can eliminate up to 90% of the flows of non-superspreader sources and improve the accuracy of superspreader identification. Furthermore, the proposed scheme has a smaller fan-out estimation error and consumes less memory than previously developed approaches. The hardware implementation can process network traffic at a throughput of 27 Gbit/s.
A Stream-based Entropy Norm Estimation for High-speed Network Traffic 適用於高速網路流量分析之川流估計熵演算法研究
Network Traffic Change Detection in Real Time 即時網路流量變異偵測
Sketch-based algorithms are widely applied in various networking applications. In this research, we present a compact implementation of real-time traffic change detection system with OpenFlow on a NetFPGA platform. It is capable of monitoring network traffic up to 4Gbps line rate with detection accuracy needed based on limited memory on-board. The system utilizes an one-pass scheme to reveal the flow ID exceeding the predefined threshold. Based on the network IDs, actions are issued immediately to switches for proper responses through OpenFlow protocol.
1st Asia NetFPGA Developers’Workshop, June 14, 2010 at KAIST, Daejeon, Korea