The Experts below are selected from a list of 36 Experts worldwide ranked by ideXlab platform

Gregorio Procissi - One of the best experts on this subject based on the ideXlab platform.

  • Enabling packet fan-out in the Libpcap Library for parallel traffic processing
    2017 Network Traffic Measurement and Analysis Conference (TMA), 2017
    Co-Authors: Nicola Bonelli, Stefano Giordano, Gregorio Procissi
    Abstract:

    The large availability of multi-gigabit network cards for commodity PCs requires network applications to potentially cope with high volumes of traffic. However, computation intensive operations may not catch up with high traffic rates and need to be run in parallel over multiple processing cores. As of today, the vast majority of network applications are still based on the use of the pcap Library interface which, unfortunately, does not provide a native multi-core support, even though the underlying capture technologies do. This paper introduces a novel version of the pcap Library for the Linux operating-system that allows application level parallelism. The new Library natively supports fanout operations for both multi-threaded and multi-process applications, by means of extended API as well as by a declarative grammar configuration suitable for legacy applications. In addition, the Library can transparently run on top of the standard Linux socket and other accelerated capture engines. Performance evaluation has been carried out on a multi-core architecture in pure capture tests and in more realistic use cases involving monitoring applications such as Tstat and Bro, with standard Linux socket and the PFQ accelerated engine.

  • TMA - Enabling packet fan-out in the Libpcap Library for parallel traffic processing
    2017 Network Traffic Measurement and Analysis Conference (TMA), 2017
    Co-Authors: Nicola Bonelli, Stefano Giordano, Gregorio Procissi
    Abstract:

    The large availability of multi-gigabit network cards for commodity PCs requires network applications to potentially cope with high volumes of traffic. However, computation intensive operations may not catch up with high traffic rates and need to be run in parallel over multiple processing cores. As of today, the vast majority of network applications are still based on the use of the pcap Library interface which, unfortunately, does not provide a native multi-core support, even though the underlying capture technologies do. This paper introduces a novel version of the pcap Library for the Linux operating-system that allows application level parallelism. The new Library natively supports fanout operations for both multi-threaded and multi-process applications, by means of extended API as well as by a declarative grammar configuration suitable for legacy applications. In addition, the Library can transparently run on top of the standard Linux socket and other accelerated capture engines. Performance evaluation has been carried out on a multi-core architecture in pure capture tests and in more realistic use cases involving monitoring applications such as Tstat and Bro, with standard Linux socket and the PFQ accelerated engine.

Kai Zhang - One of the best experts on this subject based on the ideXlab platform.

  • design and implementation of a user extensible network packet generator
    MATEC Web of Conferences, 2017
    Co-Authors: Feng Yang, Shengyu Chen, Kai Zhang
    Abstract:

    The security problems of network equipment are becoming more and more important with the fast development of the Internet. Aiming at the security, stability and protocol consistency of network security equipment, a user extensible network security device testing framework is proposed, and a user extensible network packet generator is designed based on Libnet and Libpcap Library. The system uses the extensibility of XML document and metadata-based reflection technology to design a set of extensible protocol template, which is composed of user-defined data and data length to construct a specific network data packet to meet the specific network security equipment testing. The security, stability and protocol consistency of the network security equipment are tested by the test method through the test in the LAN simulation environment to ensure the security of the network equipment and the network environment.

Richard Harang - One of the best experts on this subject based on the ideXlab platform.

  • Characterization of Extremely Lightweight Intrusion Detection (ELIDe) Power Utilization with Varying Throughput and Payload Sizes
    2015
    Co-Authors: Garrett S Payer, Ken F. Yu, Richard Harang
    Abstract:

    Abstract : This report presents the results of a power utilization and packet loss study for the Extremely Lightweight Intrusion Detection (ELIDe) algorithm on an Android-based mobile device. Our results show that the hashing and inner product operations performed by the core ELIDe program alone results in negligible additional power consumption. The bulk of the excess power consumption caused by the ELIDe program is attributable to the data capturing of the Libpcap Library and the internal hardware of the device that performs data capturing based on the limitation of the mobile device. Power consumption is tightly linked to the total number of network packets processed by the device, but remains tractable within the operating range of ELIDe. Results also show that ELIDe is capable of handling throughput rates of up to approximately 2.5 megabits per second (assuming a normal distribution of packet sizes) with no significant packet loss.

  • Compilation of a Network Security/Machine Learning Toolchain for Android ARM Platforms
    2014
    Co-Authors: Ralph P Ritchey, Garrett S Payer, Richard Harang
    Abstract:

    Abstract : This report provides the instructions necessary to prepare the Basic Linear Algebra Subprograms (BLAS) Library and Libpcap Library for use on an Android-based device. Instructions are also included that give the additional capability of being able to compile FORTRAN-based source code to the Android Native Development Kit (NDK) that is not provided by default, which will be needed to compile BLAS. These packages provide basic functionality for machine learning-oriented network security applications, and promote the use of the Android platform as a suitable test bed for research into security tools for mobile and ad-hoc networks.

Nicola Bonelli - One of the best experts on this subject based on the ideXlab platform.

  • Enabling packet fan-out in the Libpcap Library for parallel traffic processing
    2017 Network Traffic Measurement and Analysis Conference (TMA), 2017
    Co-Authors: Nicola Bonelli, Stefano Giordano, Gregorio Procissi
    Abstract:

    The large availability of multi-gigabit network cards for commodity PCs requires network applications to potentially cope with high volumes of traffic. However, computation intensive operations may not catch up with high traffic rates and need to be run in parallel over multiple processing cores. As of today, the vast majority of network applications are still based on the use of the pcap Library interface which, unfortunately, does not provide a native multi-core support, even though the underlying capture technologies do. This paper introduces a novel version of the pcap Library for the Linux operating-system that allows application level parallelism. The new Library natively supports fanout operations for both multi-threaded and multi-process applications, by means of extended API as well as by a declarative grammar configuration suitable for legacy applications. In addition, the Library can transparently run on top of the standard Linux socket and other accelerated capture engines. Performance evaluation has been carried out on a multi-core architecture in pure capture tests and in more realistic use cases involving monitoring applications such as Tstat and Bro, with standard Linux socket and the PFQ accelerated engine.

  • TMA - Enabling packet fan-out in the Libpcap Library for parallel traffic processing
    2017 Network Traffic Measurement and Analysis Conference (TMA), 2017
    Co-Authors: Nicola Bonelli, Stefano Giordano, Gregorio Procissi
    Abstract:

    The large availability of multi-gigabit network cards for commodity PCs requires network applications to potentially cope with high volumes of traffic. However, computation intensive operations may not catch up with high traffic rates and need to be run in parallel over multiple processing cores. As of today, the vast majority of network applications are still based on the use of the pcap Library interface which, unfortunately, does not provide a native multi-core support, even though the underlying capture technologies do. This paper introduces a novel version of the pcap Library for the Linux operating-system that allows application level parallelism. The new Library natively supports fanout operations for both multi-threaded and multi-process applications, by means of extended API as well as by a declarative grammar configuration suitable for legacy applications. In addition, the Library can transparently run on top of the standard Linux socket and other accelerated capture engines. Performance evaluation has been carried out on a multi-core architecture in pure capture tests and in more realistic use cases involving monitoring applications such as Tstat and Bro, with standard Linux socket and the PFQ accelerated engine.

Feng Yang - One of the best experts on this subject based on the ideXlab platform.

  • design and implementation of a user extensible network packet generator
    MATEC Web of Conferences, 2017
    Co-Authors: Feng Yang, Shengyu Chen, Kai Zhang
    Abstract:

    The security problems of network equipment are becoming more and more important with the fast development of the Internet. Aiming at the security, stability and protocol consistency of network security equipment, a user extensible network security device testing framework is proposed, and a user extensible network packet generator is designed based on Libnet and Libpcap Library. The system uses the extensibility of XML document and metadata-based reflection technology to design a set of extensible protocol template, which is composed of user-defined data and data length to construct a specific network data packet to meet the specific network security equipment testing. The security, stability and protocol consistency of the network security equipment are tested by the test method through the test in the LAN simulation environment to ensure the security of the network equipment and the network environment.