In this work, we present P4-IPsec, a concept for IPsec in software-defined networks (SDN)
using P4 programmable data planes. The prototype implementation features ESP in tunnel …

Industrial Control and SCADA (Supervisory Control and Data Acquisition) networks control
critical infrastructure such as power plants, nuclear facilities, and water supply systems …

Abstract A Network Intrusion Detection System (NIDS) is a fundamental security tool.
However, under heavy network traffic, a NIDS might become a bottleneck. In an overloaded …

Network Intrusion Detection Systems (NIDSes) face significant challenges coming from the
relentless network link speed growth and increasing complexity of threats. Both hardware …

This paper proposes and implements a Network Function Virtualization (NFV) security
architecture to provide automatic and efficient detection and mitigation against Web …

In recent years, advances in both hardware and software offer to user-space applications O
(10Gbps) worth of traffic. Processing data at such line rate with software running on …

Signature-based Network Intrusion Detection Systems (NIDS) is state-of-the-art for precise
attack detection. Using multiple instances of NIDS in parallel is considered the most …

During the last decade, rapid development of mobile devices and applications has produced
a large number of mobile data which hide numerous cyber‐attacks. To monitor the mobile …

To realize the high-speed intrusion detection by accommodating many regex-based
signatures and the growing network link capacities, we propose a Service TimE-Aware Load …

Cloud service providers usually offer IPsec VPN services to tenants by deploying the
software IPsec gateway on the virtual machine. However, the current software IPsec …