{"id":"https://openalex.org/W7084135430","doi":"https://doi.org/10.1109/infocom55648.2025.11044759","title":"SentinelX: A Lightweight Malicious Traffic Detection System Based on Programmable Switches","display_name":"SentinelX: A Lightweight Malicious Traffic Detection System Based on Programmable Switches","publication_year":2025,"publication_date":"2025-05-19","ids":{"openalex":"https://openalex.org/W7084135430","doi":"https://doi.org/10.1109/infocom55648.2025.11044759"},"language":"en","primary_location":{"id":"doi:10.1109/infocom55648.2025.11044759","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocom55648.2025.11044759","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2025 - IEEE Conference on Computer Communications","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Zutao Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Zutao Zhang","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School,China"],"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School,China","institution_ids":["https://openalex.org/I4210114105"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zeyu Luan","orcid":null},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zeyu Luan","raw_affiliation_strings":["Pengcheng Laboratory,China"],"affiliations":[{"raw_affiliation_string":"Pengcheng Laboratory,China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Qing Li","orcid":null},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qing Li","raw_affiliation_strings":["Pengcheng Laboratory,China"],"affiliations":[{"raw_affiliation_string":"Pengcheng Laboratory,China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhuyun Qi","orcid":null},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuyun Qi","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School,China"],"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School,China","institution_ids":["https://openalex.org/I4210114105"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Kejun Li","orcid":null},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kejun Li","raw_affiliation_strings":["Pengcheng Laboratory,China"],"affiliations":[{"raw_affiliation_string":"Pengcheng Laboratory,China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yong Jiang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Jiang","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School,China"],"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School,China","institution_ids":["https://openalex.org/I4210114105"]}]},{"author_position":"last","author":{"id":null,"display_name":"Zhenhui Yuan","orcid":null},"institutions":[{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Zhenhui Yuan","raw_affiliation_strings":["University of Warwick,United Kingdom"],"affiliations":[{"raw_affiliation_string":"University of Warwick,United Kingdom","institution_ids":["https://openalex.org/I39555362"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210114105"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.61496302,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T13269","display_name":"Orthoptera Research and Taxonomy","score":0.9047999978065491,"subfield":{"id":"https://openalex.org/subfields/1105","display_name":"Ecology, Evolution, Behavior and Systematics"},"field":{"id":"https://openalex.org/fields/11","display_name":"Agricultural and Biological Sciences"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},"topics":[{"id":"https://openalex.org/T13269","display_name":"Orthoptera Research and Taxonomy","score":0.9047999978065491,"subfield":{"id":"https://openalex.org/subfields/1105","display_name":"Ecology, Evolution, Behavior and Systematics"},"field":{"id":"https://openalex.org/fields/11","display_name":"Agricultural and Biological Sciences"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T10005","display_name":"Ecology and Vegetation Dynamics Studies","score":0.031099999323487282,"subfield":{"id":"https://openalex.org/subfields/2309","display_name":"Nature and Landscape Conservation"},"field":{"id":"https://openalex.org/fields/23","display_name":"Environmental Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10895","display_name":"Species Distribution and Climate Change","score":0.004800000227987766,"subfield":{"id":"https://openalex.org/subfields/2302","display_name":"Ecological Modeling"},"field":{"id":"https://openalex.org/fields/23","display_name":"Environmental Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.6735000014305115},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5422999858856201},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.49709999561309814},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.3828999996185303},{"id":"https://openalex.org/keywords/table","display_name":"Table (database)","score":0.3499999940395355},{"id":"https://openalex.org/keywords/bandwidth","display_name":"Bandwidth (computing)","score":0.3409000039100647},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.33889999985694885},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.326200008392334}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7480000257492065},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.6735000014305115},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5422999858856201},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.49709999561309814},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.420199990272522},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.3828999996185303},{"id":"https://openalex.org/C45235069","wikidata":"https://www.wikidata.org/wiki/Q278425","display_name":"Table (database)","level":2,"score":0.3499999940395355},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.34119999408721924},{"id":"https://openalex.org/C2776257435","wikidata":"https://www.wikidata.org/wiki/Q1576430","display_name":"Bandwidth (computing)","level":2,"score":0.3409000039100647},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.33889999985694885},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.326200008392334},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3222000002861023},{"id":"https://openalex.org/C37135326","wikidata":"https://www.wikidata.org/wiki/Q931942","display_name":"Design flow","level":2,"score":0.3156999945640564},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.3086000084877014},{"id":"https://openalex.org/C134835016","wikidata":"https://www.wikidata.org/wiki/Q690265","display_name":"Lookup table","level":2,"score":0.3059999942779541},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.303600013256073},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.29989999532699585},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.29660001397132874},{"id":"https://openalex.org/C68649174","wikidata":"https://www.wikidata.org/wiki/Q1379116","display_name":"Base station","level":2,"score":0.29409998655319214},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.28760001063346863},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2824000120162964},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.26589998602867126},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2574999928474426},{"id":"https://openalex.org/C70153297","wikidata":"https://www.wikidata.org/wiki/Q5591907","display_name":"Gradient boosting","level":3,"score":0.2563000023365021}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/infocom55648.2025.11044759","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocom55648.2025.11044759","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2025 - IEEE Conference on Computer Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G973676509","display_name":null,"funder_award_id":"2022YFB3105000","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"In":[0],"recent":[1],"years,":[2],"programmable":[3],"switches":[4],"have":[5,39],"emerged":[6],"as":[7],"robust":[8],"platforms":[9],"for":[10,124],"deploying":[11],"high-performance":[12],"network":[13],"services":[14],"to":[15,53,91],"detect":[16],"malicious":[17],"traffic.":[18],"However,":[19],"current":[20],"researches":[21],"face":[22],"several":[23,64],"challenges:":[24],"firstly,":[25],"the":[26,46,126,130,141,152,164],"flow":[27,72],"tables":[28],"generated":[29],"by":[30,115,136],"model":[31],"deployment":[32],"are":[33],"cumbersome;":[34],"secondly,":[35],"existing":[36],"unsupervised":[37,103],"methods":[38],"difficulty":[40],"handling":[41],"repetitive":[42],"traffic;":[43],"and":[44,51],"thirdly,":[45],"flow-level":[47],"inference":[48,127],"is":[49],"coarse-grained":[50],"susceptible":[52],"attacks.":[54],"To":[55],"address":[56],"these":[57],"challenges,":[58],"we":[59,67,98,119],"propose":[60,99],"SentinelX,":[61],"which":[62,111],"offers":[63],"advancements.":[65],"Initially,":[66],"design":[68,120],"a":[69,101,107,121],"space-saving":[70],"multi-level":[71],"table":[73],"representation":[74],"method.":[75],"We":[76],"then":[77],"introduce":[78],"TreeDivider,":[79],"an":[80],"innovative":[81],"model-splitting":[82],"algorithm":[83],"that":[84,146],"achieves":[85],"significant":[86],"space":[87],"reductions":[88],"of":[89,133,151,155,166],"up":[90],"63.88%":[92],"after":[93],"only":[94],"two":[95],"subdivisions.":[96],"Next,":[97],"DualTree,":[100],"hardware-specific":[102],"decision":[104],"tree":[105],"utilizing":[106],"dual":[108],"threshold":[109],"mode,":[110],"enhances":[112],"detection":[113,131],"accuracy":[114],"approximately":[116,161],"30.24%.":[117],"Finally,":[118],"fine-grained":[122],"method":[123],"determining":[125],"point,":[128],"boosting":[129],"rate":[132],"bypass":[134],"attacks":[135],"30.03%.":[137],"Extensive":[138],"experiments":[139],"on":[140],"H3C":[142],"S9830-32H-H1":[143],"switch":[144,156],"demonstrate":[145],"SentinelX":[147],"can":[148],"reach":[149],"99.99%":[150],"maximum":[153],"bandwidth":[154],"ports":[157],"with":[158],"nanosecond-level":[159],"latency,":[160],"1.38":[162],"times":[163],"delay":[165],"L3":[167],"(network":[168],"layer)":[169],"base":[170],"forwarding.":[171]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}