Technical Program

Paper Detail

Paper IDD-3-1.2
Paper Title Real-Time DDoS Attack Detection using Sketch-based Entropy Estimation on the NetFPGA SUME Platform
Authors Yu-Kuen Lai, Po-Yu Huang, Ho-Ping Lee, Cheng-Lin Tsai, Cheng-Sheng Chang, Manh Hung Nguyen, Yu-Jau Lin, Chung-Yuan Christian University, Taiwan; Te-Lung Liu, National Center for High Performance Computing, Taiwan; Jim Hao Chen, Northwestern University, United States
Session D-3-1: Digital Convergence of 5G, AIoT and Security II
TimeThursday, 10 December, 12:30 - 14:00
Presentation Time:Thursday, 10 December, 12:45 - 13:00 Check your Time Zone
All times are in New Zealand Time (UTC +13)
Topic Wireless Communications and Networking (WCN): Special Session: Digital Convergence of 5G, AIoT and Security
Abstract With the rapid increase in network traffic and different types of attacks, real-time anomaly detection has received much attention recently. Shannon entropy can be an essential measure for identifying untypical network traffic; however, it is a time-consuming task to calculate entropy in real-time in the high-speed network environment. This work transforms the complex computations of the Shannon entropy estimation, proposed by Clifford and Cosma, into pre-computed lookup tables in the FPGA. Together with the LSTM-RNN, the proposed system on the NetFPGA SUME platform can detect DDoS attacks accurately at wire-speed of 40 Gbps throughput.