{"id":"https://openalex.org/W2166447996","doi":"https://doi.org/10.1109/ispass.2008.4510736","title":"Conservative vs. Optimistic Parallelization of Stateful Network Intrusion Detection","display_name":"Conservative vs. Optimistic Parallelization of Stateful Network Intrusion Detection","publication_year":2008,"publication_date":"2008-04-01","ids":{"openalex":"https://openalex.org/W2166447996","doi":"https://doi.org/10.1109/ispass.2008.4510736","mag":"2166447996"},"language":"en","primary_location":{"id":"doi:10.1109/ispass.2008.4510736","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ispass.2008.4510736","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ISPASS 2008 - IEEE International Symposium on Performance Analysis of Systems and software","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5025665098","display_name":"Derek L. Schuff","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Derek L. Schuff","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109767496","display_name":"Yung Ryn Choe","orcid":"https://orcid.org/0000-0001-6114-054X"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yung Ryn Choe","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110871804","display_name":"Vijay S. Pai","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vijay S. Pai","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I219193219"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"33","issue":null,"first_page":"32","last_page":"43"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/speedup","display_name":"Speedup","score":0.8775522708892822},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8620455265045166},{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.7424379587173462},{"id":"https://openalex.org/keywords/thread","display_name":"Thread (computing)","score":0.7387968301773071},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.6529132127761841},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6444462537765503},{"id":"https://openalex.org/keywords/speculative-multithreading","display_name":"Speculative multithreading","score":0.6092896461486816},{"id":"https://openalex.org/keywords/concurrency","display_name":"Concurrency","score":0.5146414041519165},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5087276101112366},{"id":"https://openalex.org/keywords/multithreading","display_name":"Multithreading","score":0.3953514099121094},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.2805928885936737},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.22107353806495667},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.20056304335594177}],"concepts":[{"id":"https://openalex.org/C68339613","wikidata":"https://www.wikidata.org/wiki/Q1549489","display_name":"Speedup","level":2,"score":0.8775522708892822},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8620455265045166},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.7424379587173462},{"id":"https://openalex.org/C138101251","wikidata":"https://www.wikidata.org/wiki/Q213092","display_name":"Thread (computing)","level":2,"score":0.7387968301773071},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.6529132127761841},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6444462537765503},{"id":"https://openalex.org/C15296174","wikidata":"https://www.wikidata.org/wiki/Q7575343","display_name":"Speculative multithreading","level":4,"score":0.6092896461486816},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.5146414041519165},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5087276101112366},{"id":"https://openalex.org/C201410400","wikidata":"https://www.wikidata.org/wiki/Q1064412","display_name":"Multithreading","level":3,"score":0.3953514099121094},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2805928885936737},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.22107353806495667},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.20056304335594177}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ispass.2008.4510736","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ispass.2008.4510736","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ISPASS 2008 - IEEE International Symposium on Performance Analysis of Systems and software","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W124244495","https://openalex.org/W1512979674","https://openalex.org/W1516506771","https://openalex.org/W1531610435","https://openalex.org/W1541939527","https://openalex.org/W1674877186","https://openalex.org/W1911613893","https://openalex.org/W2099964107","https://openalex.org/W2106062486","https://openalex.org/W2135932040","https://openalex.org/W2145127894","https://openalex.org/W2146052712","https://openalex.org/W2149375166","https://openalex.org/W2149695592","https://openalex.org/W2159734511","https://openalex.org/W3144157896","https://openalex.org/W6605045863","https://openalex.org/W6631793881","https://openalex.org/W6632301646","https://openalex.org/W6637096788"],"related_works":["https://openalex.org/W2105895556","https://openalex.org/W3089467468","https://openalex.org/W1985089255","https://openalex.org/W2115561485","https://openalex.org/W2153202644","https://openalex.org/W2010970156","https://openalex.org/W4235861380","https://openalex.org/W2106625514","https://openalex.org/W2125768521","https://openalex.org/W2377593213"],"abstract_inverted_index":{"This":[0,182],"paper":[1,161],"presents":[2,162],"and":[3,28,60,115],"experimentally":[4],"analyzes":[5],"the":[6,13,38,103,168],"performance":[7,99,130],"of":[8,40,102,142],"three":[9],"parallelization":[10,165],"strategies":[11],"for":[12,100,213],"popular":[14],"open-source":[15],"Snort":[16],"network":[17,105],"intrusion":[18],"detection":[19],"system":[20,183],"(NIDS).":[21],"The":[22,32,54,94,202],"parallelizations":[23],"include":[24],"2":[25],"conservative":[26,33,146],"variants":[27],"1":[29],"optimistic":[30,164,203],"scheme.":[31],"strategy":[34],"parallelizes":[35],"inspection":[36,118],"at":[37,66,91],"level":[39],"TCP/IP":[41],"flows,":[42],"as":[43,110,112],"any":[44,139],"potential":[45,140],"inter-packet":[46],"dependences":[47],"are":[48,56,177],"confined":[49],"to":[50,76,188,225],"a":[51,88,92,121,175,185],"single":[52,186],"flow.":[53],"flows":[55,73],"partitioned":[57],"among":[58],"threads,":[59,194],"each":[61],"flow":[62,90,176,187,216],"is":[63,200],"processed":[64,191],"in-order":[65],"one":[67,85,222],"thread.":[68],"A":[69],"second":[70],"variation":[71],"reassigns":[72],"between":[74],"threads":[75],"improve":[77,129],"load":[78,143],"balance":[79],"but":[80,218],"still":[81],"requires":[82],"that":[83,137,166,170,208],"only":[84],"thread":[86],"process":[87],"given":[89],"time.":[93],"flow-concurrent":[95],"scheme":[96],"provides":[97],"good":[98,150],"3":[101],"5":[104],"packet":[106],"traces":[107,214],"studied,":[108],"reaching":[109],"high":[111],"4.1":[113],"speedup":[114,210,228],"3.1":[116],"Gbps":[117],"rate":[119],"on":[120,230],"commodity":[122],"8-core":[123],"server.":[124],"Dynamic":[125],"reassignment":[126],"does":[127],"not":[128,171],"scalability":[131],"because":[132],"it":[133],"introduces":[134],"locking":[135],"overheads":[136,207],"offset":[138],"benefits":[141,220],"balancing.":[144],"Neither":[145],"version":[147,204],"can":[148],"achieve":[149],"performance,":[151],"however,":[152],"without":[153],"enough":[154],"concurrent":[155],"networkflows.":[156],"For":[157],"this":[158,160],"case,":[159],"an":[163,197],"exploits":[167],"observation":[169],"all":[172],"packets":[173],"from":[174],"actually":[178],"connected":[179],"by":[180,192,211],"dependences.":[181],"allows":[184],"be":[189],"simultaneously":[190],"multiple":[193],"stalling":[195],"if":[196],"actual":[198],"dependence":[199],"found.":[201],"has":[205],"additional":[206,223],"reduce":[209],"25%":[212],"with":[215],"concurrency,":[217],"its":[219],"allow":[221],"trace":[224],"see":[226],"substantial":[227],"(2.4":[229],"five":[231],"cores).":[232]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2013,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
