{"id":"https://openalex.org/W2148468647","doi":"https://doi.org/10.1145/1921168.1921192","title":"Network-wide deployment of intrusion detection and prevention systems","display_name":"Network-wide deployment of intrusion detection and prevention systems","publication_year":2010,"publication_date":"2010-11-30","ids":{"openalex":"https://openalex.org/W2148468647","doi":"https://doi.org/10.1145/1921168.1921192","mag":"2148468647"},"language":"en","primary_location":{"id":"doi:10.1145/1921168.1921192","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1921168.1921192","pdf_url":null,"source":{"id":"https://openalex.org/S4306523887","display_name":"Proceedings of the 6th International Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 6th International COnference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079175103","display_name":"Vyas Sekar","orcid":"https://orcid.org/0000-0001-5452-8976"},"institutions":[{"id":"https://openalex.org/I1343180700","display_name":"Intel (United States)","ror":"https://ror.org/01ek73717","country_code":"US","type":"company","lineage":["https://openalex.org/I1343180700"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vyas Sekar","raw_affiliation_strings":["Intel Labs, Berkeley"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Intel Labs, Berkeley","institution_ids":["https://openalex.org/I1343180700"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060555975","display_name":"Ravishankar Krishnaswamy","orcid":"https://orcid.org/0000-0002-5765-0843"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ravishankar Krishnaswamy","raw_affiliation_strings":["Carnegie Mellon University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078381067","display_name":"Anupam Gupta","orcid":"https://orcid.org/0000-0001-5579-3405"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anupam Gupta","raw_affiliation_strings":["Carnegie Mellon University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5074117167","display_name":"Michael K. Reiter","orcid":"https://orcid.org/0000-0001-7007-8274"},"institutions":[{"id":"https://openalex.org/I114027177","display_name":"University of North Carolina at Chapel Hill","ror":"https://ror.org/0130frc33","country_code":"US","type":"education","lineage":["https://openalex.org/I114027177"]},{"id":"https://openalex.org/I1333535994","display_name":"University of North Carolina Health Care","ror":"https://ror.org/00qz24g20","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I1333535994"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael K. Reiter","raw_affiliation_strings":["UNC Chapel Hill"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UNC Chapel Hill","institution_ids":["https://openalex.org/I114027177","https://openalex.org/I1333535994"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":38,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"12"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8020413517951965},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6921492218971252},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6518090963363647},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5957008600234985},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5878615379333496},{"id":"https://openalex.org/keywords/linear-programming","display_name":"Linear programming","score":0.4793339669704437},{"id":"https://openalex.org/keywords/footprint","display_name":"Footprint","score":0.46218690276145935},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.46018630266189575},{"id":"https://openalex.org/keywords/rounding","display_name":"Rounding","score":0.4535740613937378},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.42980819940567017},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3599820137023926},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.1824130415916443},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.15012392401695251},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1498940885066986},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.13317623734474182},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.10777175426483154},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.0888223648071289},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.08825668692588806}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8020413517951965},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6921492218971252},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6518090963363647},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5957008600234985},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5878615379333496},{"id":"https://openalex.org/C41045048","wikidata":"https://www.wikidata.org/wiki/Q202843","display_name":"Linear programming","level":2,"score":0.4793339669704437},{"id":"https://openalex.org/C132943942","wikidata":"https://www.wikidata.org/wiki/Q2562511","display_name":"Footprint","level":2,"score":0.46218690276145935},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.46018630266189575},{"id":"https://openalex.org/C136625980","wikidata":"https://www.wikidata.org/wiki/Q663208","display_name":"Rounding","level":2,"score":0.4535740613937378},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.42980819940567017},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3599820137023926},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.1824130415916443},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.15012392401695251},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1498940885066986},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.13317623734474182},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.10777175426483154},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0888223648071289},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08825668692588806},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C66938386","wikidata":"https://www.wikidata.org/wiki/Q633538","display_name":"Structural engineering","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1145/1921168.1921192","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1921168.1921192","pdf_url":null,"source":{"id":"https://openalex.org/S4306523887","display_name":"Proceedings of the 6th International Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 6th International COnference","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.176.7575","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.176.7575","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.cmu.edu/%7Evyass/papers/techreport_CMU-CS-10-124.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.225.2149","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.225.2149","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://berkeley.intel-research.net/vsekar/papers/conext10.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.297.6320","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.297.6320","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://conferences.sigcomm.org/co-next/2010/CoNEXT_papers/18-Sekar.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.300.1011","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.300.1011","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.unc.edu/~reiter/papers/2010/CoNEXT.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3066314388","display_name":null,"funder_award_id":"CNS-0756998CNS-0831245CCF-1016799","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"},{"id":"https://openalex.org/G6690568210","display_name":null,"funder_award_id":"CNS-0756998CNS-0831245CCF-1016799","funder_id":"https://openalex.org/F4320337387","funder_display_name":"Division of Computing and Communication Foundations"},{"id":"https://openalex.org/G7714558275","display_name":null,"funder_award_id":"N000141010155","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"},{"id":"https://openalex.org/F4320337387","display_name":"Division of Computing and Communication Foundations","ror":"https://ror.org/01mng8331"},{"id":"https://openalex.org/F4320337388","display_name":"Division of Computer and Network Systems","ror":"https://ror.org/02rdzmk74"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W59037818","https://openalex.org/W119389350","https://openalex.org/W190598098","https://openalex.org/W1516506771","https://openalex.org/W1516812305","https://openalex.org/W1531610435","https://openalex.org/W1541939527","https://openalex.org/W1549590828","https://openalex.org/W1560486077","https://openalex.org/W1568573326","https://openalex.org/W1569835329","https://openalex.org/W1666565521","https://openalex.org/W1763270762","https://openalex.org/W1964124216","https://openalex.org/W1970701242","https://openalex.org/W1971529969","https://openalex.org/W1991657916","https://openalex.org/W2022191808","https://openalex.org/W2022498285","https://openalex.org/W2058000074","https://openalex.org/W2070591701","https://openalex.org/W2095234341","https://openalex.org/W2097980166","https://openalex.org/W2105140491","https://openalex.org/W2108867737","https://openalex.org/W2116398767","https://openalex.org/W2116434280","https://openalex.org/W2128399454","https://openalex.org/W2129138880","https://openalex.org/W2129700391","https://openalex.org/W2133496820","https://openalex.org/W2134252651","https://openalex.org/W2137559158","https://openalex.org/W2137574724","https://openalex.org/W2139054829","https://openalex.org/W2139153904","https://openalex.org/W2148133096","https://openalex.org/W2148491003","https://openalex.org/W2157963538","https://openalex.org/W2159396835","https://openalex.org/W2161480401","https://openalex.org/W2163277533","https://openalex.org/W2164210932","https://openalex.org/W2164284397","https://openalex.org/W2169401877","https://openalex.org/W2177058407","https://openalex.org/W2767225268","https://openalex.org/W4210937677","https://openalex.org/W4234061764","https://openalex.org/W4249812291"],"related_works":["https://openalex.org/W4220780102","https://openalex.org/W2410881844","https://openalex.org/W3196334750","https://openalex.org/W1502401885","https://openalex.org/W2004257129","https://openalex.org/W2116281088","https://openalex.org/W2357551824","https://openalex.org/W2016668641","https://openalex.org/W2019368960","https://openalex.org/W2349094459"],"abstract_inverted_index":{"Traditional":[0],"efforts":[1],"for":[2,33],"scaling":[3],"network":[4],"intrusion":[5,9],"detection":[6,51],"(NIDS)":[7],"and":[8,36,79,117],"prevention":[10],"systems":[11],"(NIPS)":[12],"have":[13],"largely":[14],"focused":[15],"on":[16,106,124],"a":[17,45,64],"single-vantage-point":[18],"view.":[19],"In":[20],"this":[21,84],"paper,":[22],"we":[23,43,89,118],"explore":[24],"an":[25],"alternative":[26],"design":[27,44],"that":[28,57,83],"exploits":[29],"spatial,":[30],"network-wide":[31],"opportunities":[32],"distributing":[34],"NIDS":[35,41,66],"NIPS":[37],"functions.":[38],"For":[39,87],"the":[40,70,81,101,107,113],"case,":[42],"linear":[46],"programming":[47],"formulation":[48],"to":[49,53,73,92,99],"assign":[50],"responsibilities":[52],"nodes":[54],"while":[55],"ensuring":[56],"no":[58],"node":[59],"is":[60],"overloaded.":[61],"We":[62],"describe":[63],"prototype":[65],"implementation":[67],"adapted":[68],"from":[69],"Bro":[71],"system":[72],"analyze":[74],"traffic":[75,105],"per":[76],"these":[77],"assignments,":[78],"demonstrate":[80],"advantages":[82],"approach":[85],"achieves.":[86],"NIPS,":[88],"show":[90],"how":[91],"maximally":[93],"leverage":[94],"specialized":[95],"hardware":[96,110],"(e.g.,":[97],"TCAMs)":[98],"reduce":[100],"footprint":[102],"of":[103],"unwanted":[104],"network.":[108],"Such":[109],"constraints":[111],"make":[112],"optimization":[114],"problem":[115],"NP-hard,":[116],"provide":[119],"practical":[120],"approximation":[121],"algorithms":[122],"based":[123],"randomized":[125],"rounding.":[126]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":5},{"year":2013,"cited_by_count":6},{"year":2012,"cited_by_count":6}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}