{"id":"https://openalex.org/W4398151070","doi":"https://doi.org/10.1109/tdsc.2024.3402955","title":"Intelligent In-Network Attack Detection on Programmable Switches With Soterv2","display_name":"Intelligent In-Network Attack Detection on Programmable Switches With Soterv2","publication_year":2024,"publication_date":"2024-05-20","ids":{"openalex":"https://openalex.org/W4398151070","doi":"https://doi.org/10.1109/tdsc.2024.3402955"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2024.3402955","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3402955","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078895699","display_name":"Guorui Xie","orcid":"https://orcid.org/0000-0001-7532-9116"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Guorui Xie","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Shenzhen, China","Peng Cheng Laboratory (PCL), Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105"]},{"raw_affiliation_string":"Peng Cheng Laboratory (PCL), Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100734609","display_name":"Qing Li","orcid":"https://orcid.org/0000-0002-6071-473X"},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qing Li","raw_affiliation_strings":["Peng Cheng Laboratory (PCL), Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"Peng Cheng Laboratory (PCL), Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054113563","display_name":"Chupeng Cui","orcid":null},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chupeng Cui","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100713350","display_name":"Ruoyu Li","orcid":"https://orcid.org/0000-0003-0754-2817"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruoyu Li","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Shenzhen, China","Peng Cheng Laboratory (PCL), Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105"]},{"raw_affiliation_string":"Peng Cheng Laboratory (PCL), Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068061222","display_name":"Lianbo Ma","orcid":"https://orcid.org/0000-0002-9969-211X"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lianbo Ma","raw_affiliation_strings":["Northeastern University, Shenyang, China"],"affiliations":[{"raw_affiliation_string":"Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039587539","display_name":"Zhuyun Qi","orcid":"https://orcid.org/0009-0009-0073-3873"},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuyun Qi","raw_affiliation_strings":["Peng Cheng Laboratory (PCL), Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"Peng Cheng Laboratory (PCL), Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101626204","display_name":"Yong Jiang","orcid":"https://orcid.org/0000-0002-4260-1395"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Jiang","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Shenzhen, China","Peng Cheng Laboratory (PCL), Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105"]},{"raw_affiliation_string":"Peng Cheng Laboratory (PCL), Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5078895699"],"corresponding_institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I4210136793"],"apc_list":null,"apc_paid":null,"fwci":0.6868,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.69272573,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"22","issue":"1","first_page":"440","last_page":"456"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.989300012588501,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9853000044822693,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6053093075752258},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4313291907310486},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4302203059196472},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3558194935321808},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.3415762782096863}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6053093075752258},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4313291907310486},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4302203059196472},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3558194935321808},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.3415762782096863}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2024.3402955","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3402955","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3120432254","display_name":null,"funder_award_id":"CSC202306210169","funder_id":"https://openalex.org/F4320322725","funder_display_name":"China Scholarship Council"}],"funders":[{"id":"https://openalex.org/F4320322725","display_name":"China Scholarship Council","ror":"https://ror.org/04atp4p48"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":60,"referenced_works":["https://openalex.org/W1523493493","https://openalex.org/W1925701698","https://openalex.org/W1993284846","https://openalex.org/W1994926493","https://openalex.org/W2005802709","https://openalex.org/W2017257315","https://openalex.org/W2036109700","https://openalex.org/W2055261595","https://openalex.org/W2064675550","https://openalex.org/W2112796928","https://openalex.org/W2125283600","https://openalex.org/W2171845046","https://openalex.org/W2292706249","https://openalex.org/W2296509296","https://openalex.org/W2334853001","https://openalex.org/W2606697812","https://openalex.org/W2729006349","https://openalex.org/W2743678626","https://openalex.org/W2750674396","https://openalex.org/W2768211408","https://openalex.org/W2789828921","https://openalex.org/W2883778034","https://openalex.org/W2883780447","https://openalex.org/W2963125010","https://openalex.org/W2963163009","https://openalex.org/W2963197901","https://openalex.org/W2963748489","https://openalex.org/W2982083293","https://openalex.org/W2982514609","https://openalex.org/W2983123278","https://openalex.org/W2997591727","https://openalex.org/W3016108562","https://openalex.org/W3047608117","https://openalex.org/W3100529623","https://openalex.org/W3112746081","https://openalex.org/W3117757226","https://openalex.org/W3127221738","https://openalex.org/W3136284412","https://openalex.org/W3172099698","https://openalex.org/W3174009192","https://openalex.org/W3189425713","https://openalex.org/W3189612867","https://openalex.org/W3193293525","https://openalex.org/W3211772915","https://openalex.org/W4283205402","https://openalex.org/W4285234540","https://openalex.org/W4306406279","https://openalex.org/W4308085861","https://openalex.org/W4313451572","https://openalex.org/W4319994093","https://openalex.org/W4386760178","https://openalex.org/W4400762160","https://openalex.org/W6631190155","https://openalex.org/W6636510571","https://openalex.org/W6727249380","https://openalex.org/W6766978945","https://openalex.org/W6768046412","https://openalex.org/W6773840513","https://openalex.org/W6774015895","https://openalex.org/W6788161853"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"To":[0,118],"improve":[1,119],"the":[2,81,91,100,110,115,120,127,140,161,167,173],"accuracy":[3],"of":[4,50,169,189],"network":[5,187],"attack":[6],"detection,":[7],"recent":[8],"work":[9],"has":[10],"proposed":[11],"deep":[12],"learning":[13,130],"(DL)":[14],"based":[15],"detectors.":[16],"Nonetheless,":[17],"conventional":[18],"DL-based":[19,105],"solutions":[20],"are":[21],"computation-intensive":[22],"and":[23,52,194],"have":[24],"to":[25,95,125,158],"be":[26],"deployed":[27,70],"on":[28,71,90,109,154],"high-performance":[29],"x86":[30,39],"servers,":[31,40],"which":[32],"is":[33,107],"inefficient":[34],"for":[35],"large-scale":[36,177],"networks.":[37],"Unlike":[38],"current":[41],"programmable":[42,54,72],"switches":[43],"(e.g.,":[44],"P4":[45,87,141],"switches)":[46],"support":[47],"a":[48,59,76,86,104,135,146,155,176],"throughput":[49],"Tbps":[51],"enable":[53],"logic":[55],"in":[56,134,139,175,185,198],"networks,":[57],"indicating":[58],"promising":[60],"alternative.":[61],"Therefore,":[62],"we":[63,84,123],"present":[64],"Soterv2,":[65],"an":[66],"intelligent":[67],"in-network":[68],"solution":[69],"switches.":[73],"Soterv2":[74,165,182],"utilizes":[75],"two-phase":[77],"detection":[78,174,197],"manner.":[79],"In":[80],"first":[82],"phase,":[83],"build":[85],"program":[88],"running":[89,153],"switch's":[92,111],"Tofino":[93],"ASIC":[94],"filter":[96],"malicious":[97],"packets":[98],"from":[99],"massive":[101],"traffic.":[102],"Then,":[103],"inspection":[106],"conducted":[108],"CPU,":[112],"thoroughly":[113],"detecting":[114],"filtered":[116],"packets.":[117],"filtering":[121],"performance,":[122],"propose":[124],"embed":[126],"rule-based":[128],"machine":[129],"model,":[131,149],"decision":[132],"tree,":[133],"single":[136],"match-action":[137],"table":[138],"program.":[142],"We":[143],"also":[144],"design":[145],"lightweight":[147],"DL":[148],"Branch":[150],"Convolution":[151],"Net,":[152],"multi-core":[156],"fashion":[157],"speed":[159],"up":[160],"thorough":[162],"detection.":[163],"Besides,":[164],"enables":[166],"coordination":[168],"distributed":[170],"switches,":[171],"covering":[172],"network.":[178],"Experiments":[179],"demonstrate":[180],"that":[181],"behaves":[183],"stably":[184],"eight":[186],"scenarios":[188],"different":[190],"traffic":[191],"rates":[192],"(40/100Gbps)":[193],"fulfills":[195],"per-flow":[196],"0.03s.":[199]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}
