Cloud computing infrastructure is typically intended to store and deliver sensitive data and high performance computing resources through the internet As the utility of cloud computing has increased to larger extend because of its sophisticated services, the security breaches also growing proportionately in terms of third party attacks In order to mitigate the modern security attacks in the cloud environment, the traditional firewall rules and packet filtering methods are absolutely insufficient Hence, a Deep Packet Inspection based firewall (RLPM) is developed to block the malicious attacks by validating the payload signature of arriving packets RLPM combines the potential of Reinforcement Learning (RL) and parallel fast pattern matching simultaneously and it converges to an optimal solution at the earliest RL method efficiently learns the environment and process the payload signature in a parallel manner A two-way pattern matching algorithm is integrated with RL approach that validates the signature towards attaining the quick decisions The performance results show that the RLPM is better as compared to the existing methods in terms of Response time, throughput and malicious attack blocking As the firewall is deployed and tested in a real cloud computing environment, the response time is found to be 10% lesser while throughput is also increased about 10% than the existing state-of-the-art-methods

Development of Reinforcement Learning and Pattern Matching (RLPM) Based Firewall for Secured Cloud Infrastructure

The embodiment of the invention provides an experimental platform and experimental method supporting protocol-independent packet processing. The experimental platform supporting the protocol-independent packet processing comprises a control module, a compiler module, a sending module, a switch group, a receiving module, a data processing module and a GUI module. Through the experimental platform and experimental method supporting the protocol-independent packet processing provided by the embodiment of the invention, when a user needs to perform a simulation experiment, the configuration instruction information written in advance and the switch processing logic information can be input into the experimental platform, so that the simulation experiment can be performed easily, therefore, therepeating and cumbersome process of configuring the experimental environment is avoided, and the need for the simulation of the processing logic written in the P4 language can be met; further, the experimental platform supporting the protocol-independent packet processing can also be used for the performance experiment of the switches supporting the protocol-independent packet processing.

Experimental platform and experimental method supporting protocol-independent packet processing

Over the past decades, the web is always one of the most popular targets of hackers. Today, along with the popular usage of open sources such as Wordpress and Joomla, the explosion of the vulnerabilities in such frameworks causes the websites using them to face numerous security threats. Unfortunately, many clients and small companies may not be aware of these serious security threats and call a rescuer only when the website is hacked, compromised, or blocked by the search engines. In this paper, we present an effective counter against such threats, including monetization attempts in the less valuable targets such as small websites.

Preventing the attempts of abusing cheap-hosting Web-servers for monetization attacks

The invention discloses a transmission method and device and a terminal, and the method comprises the steps: presetting a transmission total bandwidth of the terminal; obtaining to-be-transmitted target data and the attributes of the target data when the data transmission needs to be carried out; determining a target transmission bandwidth, wherein the target transmission bandwidth is at least a part of the transmission total bandwidth of the terminal, and is set for the attributes of the target data in advance; and transmitting the target data through the target transmission bandwidth. According to the invention, the bandwidth for the data with different attributes is set in advance, so as to transmit the target data through the bandwidth corresponding to the attribute of the target data while the target data needs to be transmitted, to avoid a condition that the total bandwidth of the terminal is occupied by the data in transmission when data with other attributes needs to be transmitted, and to avoid a disconnection between data transmission nodes.

Transmission method and device and terminal

The invention relates to a Twins method for accelerating regular expression matching of compression flow. The core component is a compression flow Twins matching engine and comprises three processingmodules including a decoding module, a Twins matching algorithm and a finite state automaton as well as state record data required in a processing process; the compression flow Twins matching engine constructs the finite state automaton based on a to-be-matched regular expression, the compression flow byte content is then decoded, matching is conducted with the Twins matching algorithm finally, and a matching result is output; the text string scanned and decoded by the finite state automaton is adopted by the Twins matching algorithm, and encoded character string is processed with the Twins algorithm. The throughput rate of regular matching of compression flow is effectively improved under the condition of ensuring the same matching result as the Naive method, and the method is high in matching speed, convenient to implement and high in expansibility.

Twins method for accelerating regular expression matching of compression flow

Nowadays, Deep Packet Inspection (DPI) becomes a critical component of the network traffic detection applications. For comprehensive analysis of traffic, regular expression matching as the core technique of DPI is widely used. However, web services tend to compress their traffic for less data transmission, which challenges the regular expression matching to achieve wire-speed processing. In this paper, we propose Twins, a fast regular expression matching method over compressed traffic that leverages the returned states encoding in the compression to skip the bytes to be scanned. In our evaluation results, Twins can skip about 90% compression data and can achieve 1.5Gbps throughput, which gains 2.7∼3.4 performance boost to the state-of-the-art work.

Towards a Fast Regular Expression Matching Method Over Compressed Traffic

COIN: A fast packet inspection method over compressed traffic

The invention provides an SDN controller performance testing method and system. The SDN controller performance testing system comprises a topology and data flow information read-in unit, a network topology simulated unit, a network data flow generation unit, a data flow statistical unit, a data storing unit and a performance calculating unit. Through the stimulation of a plurality of topological structures and the generation of network data flows with different characteristics, it is possible to test the performances of a variety of controllers. In addition, the design of a testing system module enables the performance calculation to be more flexible so that calculations can be carried out based on various performance indexes.

Xingxing Lu

Papers

Towards a Fast Regular Expression Matching Method Over Compressed Traffic

COIN: A fast packet inspection method over compressed traffic

SDN controller performance testing method and system

Efficient regular expression matching over compressed traffic