{"id":"https://openalex.org/W4412610575","doi":"https://doi.org/10.1109/hpcc64274.2024.00197","title":"A High-Performance IPv6 Fragment Evasion Threat Detection Method Based on eBPF and XDP","display_name":"A High-Performance IPv6 Fragment Evasion Threat Detection Method Based on eBPF and XDP","publication_year":2024,"publication_date":"2024-12-13","ids":{"openalex":"https://openalex.org/W4412610575","doi":"https://doi.org/10.1109/hpcc64274.2024.00197"},"language":"en","primary_location":{"id":"doi:10.1109/hpcc64274.2024.00197","is_oa":false,"landing_page_url":"https://doi.org/10.1109/hpcc64274.2024.00197","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on High Performance Computing and Communications (HPCC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101138559","display_name":"Bin Lin","orcid":"https://orcid.org/0009-0008-1384-0152"},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Lin","raw_affiliation_strings":["Zhengzhou University,School of Cyber Science and Engineering,Zhengzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhengzhou University,School of Cyber Science and Engineering,Zhengzhou,China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101582251","display_name":"Liancheng Zhang","orcid":"https://orcid.org/0009-0009-2064-1167"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liancheng Zhang","raw_affiliation_strings":["Information Engineering University,Zhengzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University,Zhengzhou,China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053575337","display_name":"Yi Guo","orcid":"https://orcid.org/0000-0001-9589-3806"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yi Guo","raw_affiliation_strings":["Information Engineering University,Zhengzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University,Zhengzhou,China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100759577","display_name":"Hongtao Zhang","orcid":"https://orcid.org/0000-0003-0348-6520"},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongtao Zhang","raw_affiliation_strings":["Zhengzhou University,Network Management Center,Zhengzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhengzhou University,Network Management Center,Zhengzhou,China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100571984","display_name":"Haojie Zhu","orcid":"https://orcid.org/0009-0003-2083-6614"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haojie Zhu","raw_affiliation_strings":["Information Engineering University,Zhengzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University,Zhengzhou,China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007942235","display_name":"Qingtao Wang","orcid":"https://orcid.org/0000-0003-3525-3422"},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingtao Wang","raw_affiliation_strings":["Zhengzhou University,School of Cyber Science and Engineering,Zhengzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhengzhou University,School of Cyber Science and Engineering,Zhengzhou,China","institution_ids":["https://openalex.org/I38877650"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.43816892,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1484","last_page":"1491"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9351000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9351000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9190999865531921,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fragment","display_name":"Fragment (logic)","score":0.7709400653839111},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.6658118963241577},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6363257169723511},{"id":"https://openalex.org/keywords/ipv6","display_name":"IPv6","score":0.6362059116363525},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42528679966926575},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.21265485882759094},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.19796526432037354},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.09512525796890259},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.06312555074691772}],"concepts":[{"id":"https://openalex.org/C2776235265","wikidata":"https://www.wikidata.org/wiki/Q18392052","display_name":"Fragment (logic)","level":2,"score":0.7709400653839111},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.6658118963241577},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6363257169723511},{"id":"https://openalex.org/C84555802","wikidata":"https://www.wikidata.org/wiki/Q2551624","display_name":"IPv6","level":3,"score":0.6362059116363525},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42528679966926575},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.21265485882759094},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.19796526432037354},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.09512525796890259},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.06312555074691772},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/hpcc64274.2024.00197","is_oa":false,"landing_page_url":"https://doi.org/10.1109/hpcc64274.2024.00197","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on High Performance Computing and Communications (HPCC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Climate action","score":0.6499999761581421,"id":"https://metadata.un.org/sdg/13"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320323845","display_name":"Natural Science Foundation of Henan Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W2039325879","https://openalex.org/W2198282146","https://openalex.org/W2268273430","https://openalex.org/W2305809807","https://openalex.org/W2737058386","https://openalex.org/W2887913556","https://openalex.org/W2896149153","https://openalex.org/W2903038868","https://openalex.org/W3022227621","https://openalex.org/W3046054079","https://openalex.org/W3122871070","https://openalex.org/W4214517599","https://openalex.org/W4246166885","https://openalex.org/W4385299267","https://openalex.org/W4390697953","https://openalex.org/W4395467606","https://openalex.org/W4402352939","https://openalex.org/W6638715035","https://openalex.org/W6757523527"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W1973480752","https://openalex.org/W2805502594","https://openalex.org/W3132641048","https://openalex.org/W4403688099","https://openalex.org/W4253208712","https://openalex.org/W31439402","https://openalex.org/W2217679042"],"abstract_inverted_index":{"The":[0],"IPv6":[1,17,65,115,162],"fragment":[2,18,116,163],"header":[3,107],"can":[4],"be":[5,74],"exploited":[6],"by":[7,195,204,215],"threateners":[8],"to":[9,16,63,73,88,113,146,201,208],"evade":[10],"security":[11],"systems":[12],"like":[13],"firewalls,":[14],"leading":[15],"evasion":[19,117,164],"threats.":[20,101,118],"Current":[21],"detection":[22,34,43,109,149,172],"techniques":[23],"for":[24],"these":[25,38],"threats":[26,165],"face":[27],"limitations":[28],"in":[29,67],"identification":[30],"capabilities":[31],"and":[32,48,76,98,124,185,203,220],"poor":[33],"performance.":[35],"To":[36],"address":[37],"issues,":[39],"a":[40,232],"high-performance":[41],"threat":[42,71,122,179],"method":[44,110],"based":[45,105,140],"on":[46,141,228],"eBPF":[47,84],"XDP":[49,55,133],"(named":[50],"FragEva6-Guard)":[51],"is":[52,56,86,111],"proposed.":[53],"First,":[54],"employed":[57],"at":[58,78],"the":[59,79,95,132,142,148,167],"network":[60,229],"driver":[61],"level":[62],"filter":[64],"packets":[66,72,91],"real":[68],"time,":[69],"allowing":[70],"identified":[75],"processed":[77],"earliest":[80],"stage.":[81],"Then,":[82],"an":[83,170,196,216],"program":[85],"used":[87],"further":[89],"analyze":[90],"that":[92,154],"have":[93],"passed":[94],"initial":[96],"filtering":[97],"detect":[99],"potential":[100],"A":[102],"feature":[103,126,143],"matching":[104,127,144],"upper-layer":[106],"integrity":[108],"introduced":[112],"identify":[114],"FragEva6-Guard":[119,155,181,192,224],"extracts":[120],"critical":[121],"features":[123],"performs":[125],"during":[128],"packet":[129,234],"analysis.":[130],"Finally,":[131],"decision":[134],"making":[135],"module":[136],"executes":[137],"appropriate":[138],"actions":[139],"results":[145,152],"complete":[147],"process.":[150],"Experimental":[151],"show":[153],"successfully":[156],"detects":[157],"all":[158],"16":[159],"types":[160],"of":[161,174,189,198,218,237],"from":[166],"Frag6-TestSuite,":[168],"achieving":[169],"average":[171,197,217],"rate":[173,236],"approximately":[175,205],"99.98%":[176],"across":[177],"various":[178],"intensities,":[180],"outperforms":[182],"both":[183],"Baseline":[184,202],"Suricata.":[186],"In":[187],"terms":[188],"processing":[190],"latency,":[191],"reduces":[193],"delays":[194],"99.96%":[199],"compared":[200,207],"8%":[206],"Suricata,":[209],"while":[210],"also":[211],"lowering":[212],"CPU":[213],"usage":[214],"95.03%":[219],"85.77%,":[221],"respectively.":[222],"Additionally,":[223],"has":[225],"minimal":[226],"impact":[227],"performance,":[230],"maintaining":[231],"consistent":[233],"loss":[235],"0%.":[238]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}