Implementation of Content-Based Anonymization Edge Router on NetFPGA

Fukuhara, Akihiro; Iwai, Tomomu; Sakuma, Yuiko; Nishi, Hiroaki

doi:10.1109/mcsoc.2019.00025

Cited by 4 publications

(4 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Content‐based anonymization hardware was proposed in Ref. [18]. The proposed hardware maintains network transparency and anonymizes packets according to their destination IP addresses and port numbers.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

FPGA Live Migration of Content‐Based Anonymization Mechanism with Network Consistency

Toyohara,

Yamamoto,

Nishi

2023

IEEJ Transactions Elec Engng

Self Cite

View full text Add to dashboard Cite

In smart communities, data are aggregated, and various services are provided based on it. When considering the optimization of service delivery through cooperative processing between the edge and the cloud in smart communities, it is essential to realize network transparent edge services due to the constraints of not touching end devices in order to improve user convenience and additional cost reduction. Moreover, considering the minimization of service provision and service delivery latency at the edge, it is desirable to use field‐programmable gate arrays (FPGAs), which have lower power consumption, lower latency, and higher throughput than conventional processors. Additionally, to advance towards even lower latency, the distribution of processing load is important, and service migration is necessary for this purpose. Service migration is generally used to increase service availability, and even for edge services, service migration is important because the distribution of processing and the location where the service should be provided changes over time due to user mobility. When considering network transparency, service migration should be performed on the communication path between the end device and the cloud. Furthermore, to enhance service transparency, it is essential to maintain communication consistency for continuous service provision and minimize service downtime. Therefore, this study proposes a migration mechanism with FPGAs to satisfy these requirements. As an example of a real application, we target a network‐transparent data anonymization application to protect the privacy of data providers and evaluate the proposed architecture based on the reality of latency and other factors. © 2023 Institute of Electrical Engineer of Japan and Wiley Periodicals LLC.

show abstract

Section: Related Workmentioning

confidence: 99%

“…A network‐transparent content‐based anonymization module that uses information, such as IP addresses, port numbers, and fixed‐position information in packet bodies to identify and anonymize content was proposed in Ref. [18]. This architecture is applied to the implementation.…”

Section: Transparent Fpga Context Migrationmentioning

confidence: 99%

FPGA Live Migration of Content‐Based Anonymization Mechanism with Network Consistency

Toyohara,

Yamamoto,

Nishi

2023

IEEJ Transactions Elec Engng

Self Cite

View full text Add to dashboard Cite

show abstract

“…In network applications, FPGAs have become popular because their pipelined architecture is efficient for processing network streams. For example, FPGA implementations of TCP/IP stacks with line‐rate support for 10G Ethernet, have been proposed for deployment in data centers [6] and implementations of anonymizing hardware for encapsulating personal information in edge computing environments [7].…”

Section: Objectives Of Hardware‐based Mqtt Brokermentioning

confidence: 99%

Hardware Implementation of MQTT Broker and Precise Time Synchronization Using IoT Devices

Yamamoto

Fukuhara

Nishi

2021

IEEJ Transactions Elec Engng

Self Cite

View full text Add to dashboard Cite

In recent years, while internet of things (IoT) devices and cloud computing environments have been penetrated, the increase in communication latency and concentration of traffic caused by data centers has deteriorated the quality of some network services. Message Queuing Telemetry Transport (MQTT) is a well‐known protocol for exchanging messages between dedicated applications. MQTT employs a publish–subscribe model in which a broker mediates communication between IoT devices and applications. To improve service quality, the processing latency of the broker should be reduced. Moreover, the broker's throughput must be increased. IoT devices, in particular, must maintain a highly accurate time to provide some IoT services. This study proposed hardware implementation of MQTT broker and evaluated the accuracy of an MQTT‐based time synchronization method. The proposed MQTT architecture's hardware resource utilization is also provided. We confirmed that our implementation achieved high throughput, low latency, and low jitter MQTT broker, which satisfies the smart city services for automated drive and power control, which must be less than a few milliseconds. © 2021 Institute of Electrical Engineers of Japan. Published by Wiley Periodicals LLC.

show abstract

“…While IP address anonymization is well understood [16], [17], [25] and significant related work exists in the area of network traffic anonymization, most approaches focus on packet traces. A wide variety of approaches to trace anonymization have been developed, both in software [13], [14], [26]- [32], and in hardware [25], [33], [34], although many of these approaches are now defunct. While some implementations focus on appliance and service logs [35]- [39], these approaches are typically quite destructive as they are intended for broad sharing.…”

Section: Related Workmentioning

confidence: 99%

On Generating and Labeling Network Traffic with Realistic, Self-Propagating Malware

Buchanan¹,

Collyer²,

Davidson³

et al. 2021

Preprint

View full text Add to dashboard Cite

Research and development of techniques which detect or remediate malicious network activity require access to diverse, realistic, contemporary data sets containing labeled malicious connections. In the absence of such data, said techniques cannot be meaningfully trained, tested, and evaluated. Synthetically produced data containing fabricated or merged network traffic is of limited value as it is easily distinguishable from real traffic by even simple machine learning (ML) algorithms. Real network data is preferable, but while ubiquitous is broadly both sensitive and lacking in ground truth labels, limiting its utility for ML research.This paper presents a multi-faceted approach to generating a data set of labeled malicious connections embedded within anonymized network traffic collected from large production networks. Real-world malware is defanged and introduced to simulated, secured nodes within those networks to generate realistic traffic while maintaining sufficient isolation to protect real data and infrastructure. Network sensor data, including this embedded malware traffic, is collected at a network edge and anonymized for research use.Network traffic was collected and produced in accordance with the aforementioned methods at two major educational institutions. The result is a highly realistic, long term, multiinstitution data set with embedded data labels spanning over 1.5 trillion connections and over a petabyte of sensor log data. The usability of this data set is demonstrated by its utility to our artificial intelligence and machine learning (AI/ML) research program.

show abstract

Implementation of Content-Based Anonymization Edge Router on NetFPGA

Cited by 4 publications

References 7 publications

FPGA Live Migration of Content‐Based Anonymization Mechanism with Network Consistency

FPGA Live Migration of Content‐Based Anonymization Mechanism with Network Consistency

Hardware Implementation of MQTT Broker and Precise Time Synchronization Using IoT Devices

On Generating and Labeling Network Traffic with Realistic, Self-Propagating Malware

Contact Info

Product

Resources

About