R-Scope®

Learn more about R-Scope Advanced Threat Detection »

A Pragmatic Approach of Determining Heavy-Hitter Traffic Thresholds



Publication Source: 2018 IEEE European Conference on Networks and Communications (EuCNC), Ljubljana, Slovania

Heavy-hitter flows or Cheetah Flows (CF), which are high-rate flows can result in increased packet losses and delay in general Internet traffic. A Cheetah Flow Traffic Engineering System (CFTES) is presented, which can dynamically compute a heavy-hitter or CF threshold using information from the general background traffic. The system works in conjunction with a Cheetah Flow Identification Network Function (CFINF) to detect CFs at high-link rates using an SDN controller for actions involving redirection of CFs to a lower priority scavenger queue.
Google Scholar    Article

Algorithms and Data Structures to Accelerate Network Analysis (Extended Version)



Publication Source: Elsevier: Future Generation Computer Systems Volume 86, September 2018

As the sheer amount of computer generated data continues to grow exponentially, new bottlenecks are unveiled that require rethinking our traditional software and hardware architectures. In this paper, we present five algorithms and data structures (long queue emulation, lockless bimodal queues, tail early dropping, LFN tables, and multiresolution priority queues) designed to optimize the process of analyzing network traffic. We integrated these optimizations on R-Scope, a high performance network appliance that runs the Bro network analyzer, and present benchmarks showcasing performance speed-ups of 5X at traffic rates of 10 Gbps.
Google Scholar    Article

Efficient Packet Forwarding Using Cyber-Security Aware Policies



Publication Source: Patent US9798588B1

For balancing load, a forwarder can selectively direct data from the forwarder to a processor according to a loading parameter. The selective direction includes forwarding the data to the processor for processing, transforming and/or forwarding the data to another node, and dropping the data. The forwarder can also adjust the loading parameter based on, at least in part, feedback received from the processor. One or more processing elements can store values associated with one or more flows into a structure without locking the structure. The stored values can be used to determine how to direct the flows, e.g., whether to process a flow or to drop it. The structure can be used within an information channel providing feedback to a processor.
Google Scholar    Article

Algorithms and Data Structures to Accelerate Network Analysis



Publication Source: The 4th International Workshop on Innovating the Network for Data Intensive Science (INDIS) 2017, Denver, CO, USA.

As the sheer amount of computer generated data continues to grow exponentially, new bottlenecks are unveiled that require rethinking our traditional software and hardware architectures. In this paper, we present five algorithms and data structures (long queue emulation, lockless bimodal queues, tail early dropping, LFN tables, and multiresolution priority queues) designed to optimize the process of analyzing network traffic. We integrated these optimizations on R-Scope, a high performance network appliance that runs the Bro network analyzer, and present benchmarks showcasing performance speed-ups of 5X at traffic rates of 10 Gbps.
Google Scholar    Article

Efficient Packet Forwarding Using Cyber-Security Aware Policies



Publication Source: Patent US9613163B2

For balancing load, a forwarder can selectively direct data from the forwarder to a processor according to a loading parameter. The selective direction includes forwarding the data to the processor for processing, transforming and/or forwarding the data to another node, and dropping the data. The forwarder can also adjust the loading parameter based on, at least in part, feedback received from the processor. One or more processing elements can store values associated with one or more flows into a structure without locking the structure. The stored values can be used to determine how to direct the flows, e.g., whether to process a flow or to drop it. The structure can be used within an information channel providing feedback to a processor.
Google Scholar    Article

1 2 3