We present an automatic application protocol signature gen-erating framework for Deep Packet Insp... more We present an automatic application protocol signature gen-erating framework for Deep Packet Inspection (DPI) tech-niques with performance evaluation. We propose to utilize algorithms from the field of bioinformatics. We also present preprocessing methods to accelerate our system. Moreover, we developed several postprocessing techniques to refine the accuracy of the results. Finally, we propose a DPI system, based on approximate string matching, and find it a viable, novel alternative for the refinement of exact string matching algorithm’s results. Keywords deep packet inspection, automatic protocol signature gener-ation, motif finding 1.
Este trabalho apresenta um breve estudo sobre o licenciamento ambiental na cidade de Caruaru – PE... more Este trabalho apresenta um breve estudo sobre o licenciamento ambiental na cidade de Caruaru – PE, onde foi feita uma pesquisa na empresa tecnica projetos e meio ambiente, a qual presta servico de consultoria e assessoria para os empreendimentos que contrata esse servico na cidade. Atraves das informacoes disponibilizadas foi possivel verificar quais empreendimentos estao de fato realizando sua responsabilidade ambiental relacionada ao licenciamento ambiental, quais tipos de licenciamento mais procurados e verificou-se o porte e tipos de empreendimentos tiveram o licenciamento efetivado. Apos a analise de dados que foram coletadas na empresa tecnica projetos e meio ambiente, entre os meses de fevereiro e abril de 2017, foi possivel verificar que a procura por licenciamento ambiental no municipio de Caruaru - PE, passou a ser bastante requisitada pelas empresas ja existentes e futuros empreendimentos a serem implantados nesta cidade.
A promocao de uma educacao inclusiva tem sido alvo de diversas leis governamentais, a fim de sana... more A promocao de uma educacao inclusiva tem sido alvo de diversas leis governamentais, a fim de sanar as dificuldades enfrentadas pelos surdos no ambiente escolar. Este artigo traz uma reflexao acerca da educacao inclusiva no ensino regular para alunos com surdez, tendo em vista o alto numero de pessoas surdas em idade escolar que se encontram fora das salas de aula. A partir desse cenario, buscou-se aqui, realizar um breve estudo bibliografico acerca dessa tematica, para tal, foram analisados estudos de diversos autores com o intuito de embasar as discussoes aqui expostas. Com as discussoes realizadas, observou-se que a inclusao social dos surdos no âmbito escolar, apesar das leis e decretos criados, ainda e um projeto que vem sendo desenvolvido de forma precaria. E perceptivel a necessidade de um maior investimento e comprometimento do Estado onde o objetivo principal seja o de reduzir as barreiras fisico-sociais enfrentadas pelos surdos nas salas de aula.
In spite of recent efforts, there is still a demand for tools facilitating sustainability instruc... more In spite of recent efforts, there is still a demand for tools facilitating sustainability instruction. To this end, serious games offer remarkable possibilities to foster learning in this area. However, evidences suggest that these potentialities have not been fully leveraged yet. In particular, it is challenging to design games representing the different domains (ecology, economics, politics, and culture) and social structures (individuals, families and communities) involved by sustainability issues. This work explores the mix of augmented reality, collaborative gaming and theoretical guidelines in the design of Sustain, an educational game focused on raising awareness on sustainability topics. The paper details Sustain design decisions, highlighting their relation with the chosen methodology. Our aims are: (i) to exemplify the use of a not yet adopted theoretical background, and (ii) to present reflections concerning its use.
2011 IEEE Global Telecommunications Conference - GLOBECOM 2011, 2011
Traffic identification and classification are essential tasks performed by Internet Service Provi... more Traffic identification and classification are essential tasks performed by Internet Service Provider (ISPs) administrators. Deep Packet Inspection (DPI) is currently playing a key role in traffic identification and classification due to its increased expressive power. To allow fair comparison among different DPI techniques and systems, workload generators should have the following characteristics: (i) synthetic packets with meaningful payloads; (ii) TCP
Proceedings of the first edition workshop on High performance and programmable networking, 2013
ABSTRACT Traffic Identification is a crucial task performed by ISP administrators to evaluate and... more ABSTRACT Traffic Identification is a crucial task performed by ISP administrators to evaluate and improve network service quality. Deep Packet Inspection (DPI) is a well-known technique used to identify networked traffic. DPI relies mostly on Regular Expressions (REs) evaluated by Finite Automata. Many previous studies have investigated the impacts on the classification accuracy of such systems when inspecting only a portion of the traffic. However, none have discussed the real impacts on the overall system throughput. This work presents a novel technique to perform DPI on Graphics Processing Units (GPU) called Flow-Based Traffic Identification (FBTI) and a proof-of-concept prototype analysis. Basically we want to increase DPI systems? performance on commodity platforms as well as their capacity to identify networked traffic on high speed links. By combining Deterministic Finite Automaton (DFA) for evaluating REs and flow-level packet sampling we achieve a raw performance of over 60 Gbps on GPUs. Our prototype solution could reach a real throughput of over 12 Gbps, measured as the identified volume of flows.
... [7] J. Levandoski, E. Sommer, and M. Strait, Application Layer Packet Classifier for Linux,... more ... [7] J. Levandoski, E. Sommer, and M. Strait, Application Layer Packet Classifier for Linux, http://l7-filter.sourceforge.net. ... 2007 [26] Cherian, S.; Feder, P.; Sadeghi, B.; Wisenocker, R., "Integration of the IMS/PCC framework into the mobile WiMAX network," Comm. ...
2012 IEEE Global Communications Conference (GLOBECOM), 2012
ABSTRACT Traffic Identification is a key function performed by ISPs administrators to evaluate an... more ABSTRACT Traffic Identification is a key function performed by ISPs administrators to evaluate and improve network services. However, Traffic Identification needs to be done online and at wire speed to be useful for network tunning. Deep Packet inspection (DPI) is widely used for identifying networked traffic and attacks. DPI systems search for well-known patterns inside networked packets, which are mostly expressed by Regular Expressions (RE). REs are then evaluated by abstract machines known as Deterministic Finite Automata (DFA). Today DPI systems are struggling to identify traffic as their pattern´s set and network transfer rate are increasing fast. Some previous studies grouped DFAs together to evaluate multiple patterns on a single DFA match´s run. Efficient grouping algorithms would combine several DFAs without exceeding the available machine´s memory. This work proposes and evaluates a new method to combine several DFAs into a single one. Additionally we compared this algorithm to state-of-the-art approaches using a compressed DFA model. Experimental results show that our algorithm generates less groups and transitions than existent algorithms.
We present an automatic application protocol signature gen-erating framework for Deep Packet Insp... more We present an automatic application protocol signature gen-erating framework for Deep Packet Inspection (DPI) tech-niques with performance evaluation. We propose to utilize algorithms from the field of bioinformatics. We also present preprocessing methods to accelerate our system. Moreover, we developed several postprocessing techniques to refine the accuracy of the results. Finally, we propose a DPI system, based on approximate string matching, and find it a viable, novel alternative for the refinement of exact string matching algorithm’s results. Keywords deep packet inspection, automatic protocol signature gener-ation, motif finding 1.
Este trabalho apresenta um breve estudo sobre o licenciamento ambiental na cidade de Caruaru – PE... more Este trabalho apresenta um breve estudo sobre o licenciamento ambiental na cidade de Caruaru – PE, onde foi feita uma pesquisa na empresa tecnica projetos e meio ambiente, a qual presta servico de consultoria e assessoria para os empreendimentos que contrata esse servico na cidade. Atraves das informacoes disponibilizadas foi possivel verificar quais empreendimentos estao de fato realizando sua responsabilidade ambiental relacionada ao licenciamento ambiental, quais tipos de licenciamento mais procurados e verificou-se o porte e tipos de empreendimentos tiveram o licenciamento efetivado. Apos a analise de dados que foram coletadas na empresa tecnica projetos e meio ambiente, entre os meses de fevereiro e abril de 2017, foi possivel verificar que a procura por licenciamento ambiental no municipio de Caruaru - PE, passou a ser bastante requisitada pelas empresas ja existentes e futuros empreendimentos a serem implantados nesta cidade.
A promocao de uma educacao inclusiva tem sido alvo de diversas leis governamentais, a fim de sana... more A promocao de uma educacao inclusiva tem sido alvo de diversas leis governamentais, a fim de sanar as dificuldades enfrentadas pelos surdos no ambiente escolar. Este artigo traz uma reflexao acerca da educacao inclusiva no ensino regular para alunos com surdez, tendo em vista o alto numero de pessoas surdas em idade escolar que se encontram fora das salas de aula. A partir desse cenario, buscou-se aqui, realizar um breve estudo bibliografico acerca dessa tematica, para tal, foram analisados estudos de diversos autores com o intuito de embasar as discussoes aqui expostas. Com as discussoes realizadas, observou-se que a inclusao social dos surdos no âmbito escolar, apesar das leis e decretos criados, ainda e um projeto que vem sendo desenvolvido de forma precaria. E perceptivel a necessidade de um maior investimento e comprometimento do Estado onde o objetivo principal seja o de reduzir as barreiras fisico-sociais enfrentadas pelos surdos nas salas de aula.
In spite of recent efforts, there is still a demand for tools facilitating sustainability instruc... more In spite of recent efforts, there is still a demand for tools facilitating sustainability instruction. To this end, serious games offer remarkable possibilities to foster learning in this area. However, evidences suggest that these potentialities have not been fully leveraged yet. In particular, it is challenging to design games representing the different domains (ecology, economics, politics, and culture) and social structures (individuals, families and communities) involved by sustainability issues. This work explores the mix of augmented reality, collaborative gaming and theoretical guidelines in the design of Sustain, an educational game focused on raising awareness on sustainability topics. The paper details Sustain design decisions, highlighting their relation with the chosen methodology. Our aims are: (i) to exemplify the use of a not yet adopted theoretical background, and (ii) to present reflections concerning its use.
2011 IEEE Global Telecommunications Conference - GLOBECOM 2011, 2011
Traffic identification and classification are essential tasks performed by Internet Service Provi... more Traffic identification and classification are essential tasks performed by Internet Service Provider (ISPs) administrators. Deep Packet Inspection (DPI) is currently playing a key role in traffic identification and classification due to its increased expressive power. To allow fair comparison among different DPI techniques and systems, workload generators should have the following characteristics: (i) synthetic packets with meaningful payloads; (ii) TCP
Proceedings of the first edition workshop on High performance and programmable networking, 2013
ABSTRACT Traffic Identification is a crucial task performed by ISP administrators to evaluate and... more ABSTRACT Traffic Identification is a crucial task performed by ISP administrators to evaluate and improve network service quality. Deep Packet Inspection (DPI) is a well-known technique used to identify networked traffic. DPI relies mostly on Regular Expressions (REs) evaluated by Finite Automata. Many previous studies have investigated the impacts on the classification accuracy of such systems when inspecting only a portion of the traffic. However, none have discussed the real impacts on the overall system throughput. This work presents a novel technique to perform DPI on Graphics Processing Units (GPU) called Flow-Based Traffic Identification (FBTI) and a proof-of-concept prototype analysis. Basically we want to increase DPI systems? performance on commodity platforms as well as their capacity to identify networked traffic on high speed links. By combining Deterministic Finite Automaton (DFA) for evaluating REs and flow-level packet sampling we achieve a raw performance of over 60 Gbps on GPUs. Our prototype solution could reach a real throughput of over 12 Gbps, measured as the identified volume of flows.
... [7] J. Levandoski, E. Sommer, and M. Strait, Application Layer Packet Classifier for Linux,... more ... [7] J. Levandoski, E. Sommer, and M. Strait, Application Layer Packet Classifier for Linux, http://l7-filter.sourceforge.net. ... 2007 [26] Cherian, S.; Feder, P.; Sadeghi, B.; Wisenocker, R., "Integration of the IMS/PCC framework into the mobile WiMAX network," Comm. ...
2012 IEEE Global Communications Conference (GLOBECOM), 2012
ABSTRACT Traffic Identification is a key function performed by ISPs administrators to evaluate an... more ABSTRACT Traffic Identification is a key function performed by ISPs administrators to evaluate and improve network services. However, Traffic Identification needs to be done online and at wire speed to be useful for network tunning. Deep Packet inspection (DPI) is widely used for identifying networked traffic and attacks. DPI systems search for well-known patterns inside networked packets, which are mostly expressed by Regular Expressions (RE). REs are then evaluated by abstract machines known as Deterministic Finite Automata (DFA). Today DPI systems are struggling to identify traffic as their pattern´s set and network transfer rate are increasing fast. Some previous studies grouped DFAs together to evaluate multiple patterns on a single DFA match´s run. Efficient grouping algorithms would combine several DFAs without exceeding the available machine´s memory. This work proposes and evaluates a new method to combine several DFAs into a single one. Additionally we compared this algorithm to state-of-the-art approaches using a compressed DFA model. Experimental results show that our algorithm generates less groups and transitions than existent algorithms.
Uploads
Papers by Alysson Santos