In this work, we present P4-IPsec, a concept for IPsec in software-defined networks (SDN)
using P4 programmable data planes. The prototype implementation features ESP in tunnel …

Industrial Control and SCADA (Supervisory Control and Data Acquisition) networks control
critical infrastructure such as power plants, nuclear facilities, and water supply systems …

Abstract A Network Intrusion Detection System (NIDS) is a fundamental security tool.
However, under heavy network traffic, a NIDS might become a bottleneck. In an overloaded …

Network Intrusion Detection Systems (NIDSes) face significant challenges coming from the
relentless network link speed growth and increasing complexity of threats. Both hardware …

This paper proposes and implements a Network Function Virtualization (NFV) security
architecture to provide automatic and efficient detection and mitigation against Web …

In recent years, advances in both hardware and software offer to user-space applications O
(10Gbps) worth of traffic. Processing data at such line rate with software running on …

Signature-based Network Intrusion Detection Systems (NIDS) is state-of-the-art for precise
attack detection. Using multiple instances of NIDS in parallel is considered the most …

To realize the high-speed intrusion detection by accommodating many regex-based
signatures and the growing network link capacities, we propose a Service TimE-Aware Load …

Deep Packet Inspection (DPI) is the core of security devices, such as NIDS, NIPS, which is
also an important target of the adversary. The vulnerability of DPI engine is that it relies …

Cloud service providers usually offer IPsec VPN services to tenants by deploying the
software IPsec gateway on the virtual machine. However, the current software IPsec …