{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:08:35Z","timestamp":1750306115119,"version":"3.41.0"},"reference-count":20,"publisher":"Association for Computing Machinery (ACM)","issue":"4","license":[{"start":{"date-parts":[[2017,1,11]],"date-time":"2017-01-11T00:00:00Z","timestamp":1484092800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGARCH Comput. Archit. News"],"published-print":{"date-parts":[[2017,1,11]]},"abstract":"<jats:p>This paper proposes an FPGA-based multicore architecture to integrate multiple DDoS defense mechanisms for DDoS protection. The architecture allows multiple cooperating DDoS mitigation techniques to classify incoming network packets. The proposed architecture consists of two separate partitions static and dynamic. The static partition includes packet pre-processing and post-processing modules while the DDoS filtering techniques are implemented within the dynamic partition. These filtering techniques can be implemented by either hardware custom computing cores or general purpose soft processors or both. In all cases, these DDoS filtering computing cores can be updated or changed at runtime or design time. We implement our first prototype system with the Hop-count filtering and Ingress\/Engress filtering techniques using the Xilinx Virtex 5 xc5vtx240t FPGA device. The synthesis results show that the system can work at up to 116.782MHz while utilizing about 41% LUTs, 47% Registers, and 53% Block Memory of the available hardware resources. Experimental results show that our system achieves a 100% detection rate (true positive) with a 0% false negative rate and the maximum 0.74% false positive rate. Moreover, the prototype system obtains packet processing throughput by up to 9.869 Gbps in half-duplex mode and 19.738 Gbps in full-duplex mode.<\/jats:p>","DOI":"10.1145\/3039902.3039906","type":"journal-article","created":{"date-parts":[[2017,1,17]],"date-time":"2017-01-17T13:42:08Z","timestamp":1484660528000},"page":"14-19","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["FPGA-based Multicore Architecture for Integrating Multiple DDoS Defense Mechanisms"],"prefix":"10.1145","volume":"44","author":[{"given":"Cuong","family":"Pham-Quoc","sequence":"first","affiliation":[{"name":"Ho Chi Minh City University of Technology - VNU-HCM, Vietnam"}]},{"given":"Biet","family":"Nguyen","sequence":"additional","affiliation":[{"name":"Ho Chi Minh City University of Technology - VNU-HCM, Vietnam"}]},{"given":"Tran Ngoc","family":"Thinh","sequence":"additional","affiliation":[{"name":"Ho Chi Minh City University of Technology - VNU-HCM, Vietnam"}]}],"member":"320","published-online":{"date-parts":[[2017,1,11]]},"reference":[{"volume-title":"State of the internet report","year":"2016","key":"e_1_2_1_1_1"},{"key":"e_1_2_1_2_1","unstructured":"Altera. Nios ii classic processor reference guide Apr-2015.  Altera. Nios ii classic processor reference guide Apr-2015."},{"volume-title":"The open source network tester","year":"2012","author":"Antichi G.","key":"e_1_2_1_3_1"},{"volume-title":"IEEE Advanced Information Networking and Applications","year":"2014","author":"Ayman M.","key":"e_1_2_1_4_1"},{"volume-title":"March 21","year":"2016","author":"Beverly R.","key":"e_1_2_1_5_1"},{"key":"e_1_2_1_6_1","unstructured":"M. Cotton and L. Vegoda. Special use ipv4 addresses.  M. Cotton and L. Vegoda. Special use ipv4 addresses."},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1093\/ietisy\/e90-d.12.1923"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.5555\/1794754.1794866"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICICICT.2014.6781280"},{"volume-title":"May","year":"2000","author":"F. P","key":"e_1_2_1_10_1"},{"volume-title":"Internet protocol","year":"2012","author":"Postel J.","key":"e_1_2_1_11_1"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2006.890133"},{"key":"e_1_2_1_13_1","first-page":"516","volume-title":"Wireless Mobile and Computing","author":"Wang X.","year":"2009"},{"volume-title":"Classifying ddos packets in high-speed networks. Computer science and network security, 6(2B):107--115","year":"2006","author":"Xiang Y.","key":"e_1_2_1_14_1"},{"key":"e_1_2_1_15_1","unstructured":"Xilinx. Netfpga 10g Jan 2013.  Xilinx. Netfpga 10g Jan 2013."},{"key":"e_1_2_1_16_1","unstructured":"Xilinx. Fifo generator v12.0 logicore ip product guide June-2015.  Xilinx. Fifo generator v12.0 logicore ip product guide June-2015."},{"volume-title":"March 7","year":"2011","key":"e_1_2_1_17_1"},{"key":"e_1_2_1_18_1","unstructured":"Xilinx. Microblaze processor reference guide Oct-2009.  Xilinx. Microblaze processor reference guide Oct-2009."},{"volume-title":"October 19","year":"2012","key":"e_1_2_1_19_1"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.031413.00127"}],"container-title":["ACM SIGARCH Computer Architecture News"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3039902.3039906","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3039902.3039906","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:36:31Z","timestamp":1750217791000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3039902.3039906"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,1,11]]},"references-count":20,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2017,1,11]]}},"alternative-id":["10.1145\/3039902.3039906"],"URL":"https:\/\/doi.org\/10.1145\/3039902.3039906","relation":{},"ISSN":["0163-5964"],"issn-type":[{"type":"print","value":"0163-5964"}],"subject":[],"published":{"date-parts":[[2017,1,11]]},"assertion":[{"value":"2017-01-11","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}