Advancing cyber security with a semantic path merger packet classification algorithm

Computational semantics;Graph theory;Hardware algorithms;Attack detection;Distributed internet security;Packet classification;Intrusion detection;Semantic association;Semantic networks;Content addressable memory;SRAM-based trie pipelines;Hardware-based trie pipelines;Computational intelligence;Neural networks;Parametric optimization;Genetic algorithms;Self-organizing maps;Ensemble intelligence;Firewalls;Routing;Packet filters

Thames, John Lane ; Electrical and Computer Engineering

University:Georgia Institute of Technology

Department:Electrical and Computer Engineering

关键词: Computational semantics;    Graph theory;    Hardware algorithms;    Attack detection;    Distributed internet security;    Packet classification;    Intrusion detection;    Semantic association;    Semantic networks;    Content addressable memory;    SRAM-based trie pipelines;    Hardware-based trie pipelines;    Computational intelligence;    Neural networks;    Parametric optimization;    Genetic algorithms;    Self-organizing maps;    Ensemble intelligence;    Firewalls;    Routing;    Packet filters;   

Others  :  https://smartech.gatech.edu/bitstream/1853/45872/1/thames_john_l_201212_phd.pdf

美国|英语

来源: SMARTech Repository

【 摘 要 】

This dissertation investigates and introduces novel algorithms, theories, and supporting frameworks to significantly improve the growing problem of Internet security. A distributed firewall and active response architecture is introduced that enables any device within a cyber environment to participate in the active discovery and response of cyber attacks. A theory of semantic association systems is developed for the general problem of knowledge discovery in data. The theory of semantic association systems forms the basis of a novel semantic path merger packet classification algorithm. The theoretical aspects of the semantic path merger packet classification algorithm are investigated, and the algorithm's hardware-based implementation is evaluated along with comparative analysis versus content addressable memory. Experimental results show that the hardware implementation of the semantic path merger algorithm significantly outperforms content addressable memory in terms of energy consumption and operational timing.