Intrusion detection is an important area of research. Traditionally, the approach taken to find
attacks is to inspect the contents of every packet. However, packet inspection cannot easily …

With the growth of network applications such as 5G and artificial intelligence, network
security techniques, ie, the techniques that detect various attacks (eg, well-known denial-of …

When network is undergoing problems such as congestion, scan attack, DDoS attack, etc.,
measurements are much more important than usual. In this case, traffic characteristics …

In this paper, we propose HyperVision, a realtime unsupervised machine learning (ML)
based malicious traffic detection system. Particularly, HyperVision is able to detect unknown …

Identifying the" heavy hitter" flows or flows with large traffic volumes in the data plane is
important for several applications eg, flow-size aware routing, DoS detection, and traffic …

Network measurement remains a missing piece in today's software packet processing
platforms. Sketches provide a promising building block for filling this void by monitoring …

A recent escalation of application layer Denial of Service (DoS) attacks on the Internet has
quickly shifted the interest of the research community traditionally focused on network-based …

Many algorithms for congestion control, scheduling, network measurement, active queue
management, and traffic engineering require custom processing of packets in the data plane …

In the data stream scenario, input arrives very rapidly and there is limited memory to store
the input. Algorithms have to work with one or few passes over the data, space less than …

We propose an integrated approach for solving both problems of finding the most popular k
elements, and finding frequent elements in a data stream. Our technique is efficient and …