{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T05:29:36Z","timestamp":1781587776400,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":92,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,12,2]],"date-time":"2021-12-02T00:00:00Z","timestamp":1638403200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["CCF-1815643, CNS-1618030, CRI-1823270"],"award-info":[{"award-number":["CCF-1815643, CNS-1618030, CRI-1823270"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,12,2]]},"DOI":"10.1145\/3485983.3494861","type":"proceedings-article","created":{"date-parts":[[2021,12,3]],"date-time":"2021-12-03T22:36:56Z","timestamp":1638571016000},"page":"60-75","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":23,"title":["SmartWatch"],"prefix":"10.1145","author":[{"given":"Sourav","family":"Panda","sequence":"first","affiliation":[{"name":"University of California"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yixiao","family":"Feng","sequence":"additional","affiliation":[{"name":"Texas A&amp;M University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sameer G","family":"Kulkarni","sequence":"additional","affiliation":[{"name":"Indian Institute of Technology, Gandhinagar"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"K. K.","family":"Ramakrishnan","sequence":"additional","affiliation":[{"name":"University of California"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nick","family":"Duffield","sequence":"additional","affiliation":[{"name":"Texas A&amp;M University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Laxmi N.","family":"Bhuyan","sequence":"additional","affiliation":[{"name":"University of California"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,12,3]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"2020 DDOS attacks. https:\/\/www.globenewswire.com\/news-release\/2020\/06\/23\/2052054\/0\/en\/Imperva-Research-Labs-Reveals-Abnormal-Increase-in-DDoS-Attack-Length-Despite-Popularity-of-Short-Term-Attacks.html  2020 DDOS attacks. https:\/\/www.globenewswire.com\/news-release\/2020\/06\/23\/2052054\/0\/en\/Imperva-Research-Labs-Reveals-Abnormal-Increase-in-DDoS-Attack-Length-Despite-Popularity-of-Short-Term-Attacks.html"},{"key":"e_1_3_2_2_2_1","unstructured":"ARM Cortex-A72 Architecture. https:\/\/www.tomshardware.com\/reviews\/arm-cortex-a72-architecture 4424.html  ARM Cortex-A72 Architecture. https:\/\/www.tomshardware.com\/reviews\/arm-cortex-a72-architecture 4424.html"},{"key":"e_1_3_2_2_3_1","unstructured":"Azure Encryption. https:\/\/docs.microsoft.com\/en-us\/azure\/security\/fundamentals\/encryption-overview  Azure Encryption. https:\/\/docs.microsoft.com\/en-us\/azure\/security\/fundamentals\/encryption-overview"},{"key":"e_1_3_2_2_4_1","unstructured":"The CAIDA Anonymized Internet Traces. http:\/\/www.caida.org\/data\/passive\/passive_dataset.xml.  The CAIDA Anonymized Internet Traces. http:\/\/www.caida.org\/data\/passive\/passive_dataset.xml."},{"key":"e_1_3_2_2_5_1","unstructured":"Editcap. https:\/\/www.wireshark.org\/docs\/man-pages\/editcap.html  Editcap. https:\/\/www.wireshark.org\/docs\/man-pages\/editcap.html"},{"key":"e_1_3_2_2_6_1","unstructured":"How Zeek can provide insights despite encrypted communications. https:\/\/corelight.blog\/2019\/05\/07\/how-zeek-can-provide-insights-despite-encrypted-communications\/.  How Zeek can provide insights despite encrypted communications. https:\/\/corelight.blog\/2019\/05\/07\/how-zeek-can-provide-insights-despite-encrypted-communications\/."},{"key":"e_1_3_2_2_7_1","unstructured":"Intel Tofino 2. https:\/\/www.intel.com\/content\/www\/us\/en\/products\/network-io\/programmable-ethernet-switch\/tofino-2-series.html  Intel Tofino 2. https:\/\/www.intel.com\/content\/www\/us\/en\/products\/network-io\/programmable-ethernet-switch\/tofino-2-series.html"},{"key":"e_1_3_2_2_8_1","unstructured":"Intel XL710 Datasheet. https:\/\/www.intel.com\/content\/www\/us\/en\/design\/products-and-solutions\/networking-and-io\/ethernet-controller-xl710\/technical-library.html?grouping=EMT_Content%20Type&sort=title:asc  Intel XL710 Datasheet. https:\/\/www.intel.com\/content\/www\/us\/en\/design\/products-and-solutions\/networking-and-io\/ethernet-controller-xl710\/technical-library.html?grouping=EMT_Content%20Type&sort=title:asc"},{"key":"e_1_3_2_2_9_1","unstructured":"Mapping P4 to SmartNICs. https:\/\/opennetworking.org\/wp-content\/uploads\/2020\/12\/p4_d2_2017_nfp_architecture.pdf  Mapping P4 to SmartNICs. https:\/\/opennetworking.org\/wp-content\/uploads\/2020\/12\/p4_d2_2017_nfp_architecture.pdf"},{"key":"e_1_3_2_2_10_1","unstructured":"Marvell LiquidIO III. https:\/\/www.marvell.com\/content\/dam\/marvell\/en\/public-collateral\/embedded-processors\/marvell-liquidio-III-solutions-brief.pdf  Marvell LiquidIO III. https:\/\/www.marvell.com\/content\/dam\/marvell\/en\/public-collateral\/embedded-processors\/marvell-liquidio-III-solutions-brief.pdf"},{"key":"e_1_3_2_2_11_1","unstructured":"Marvell User Guide. https:\/\/www.marvell.com\/content\/dam\/marvell\/en\/public-collateral\/ethernet-adaptersandcontrollers\/marvell-ethernet-adapters-fastlinq-41000-series-user-guide.pdf  Marvell User Guide. https:\/\/www.marvell.com\/content\/dam\/marvell\/en\/public-collateral\/ethernet-adaptersandcontrollers\/marvell-ethernet-adapters-fastlinq-41000-series-user-guide.pdf"},{"key":"e_1_3_2_2_12_1","unstructured":"Mergecap. https:\/\/www.wireshark.org\/docs\/man-pages\/mergecap.html  Mergecap. https:\/\/www.wireshark.org\/docs\/man-pages\/mergecap.html"},{"key":"e_1_3_2_2_13_1","unstructured":"Netronome Agilio LX. https:\/\/www.netronome.com\/media\/documents\/PB_Agilio_LX_2x40GbE-7-20.pdf  Netronome Agilio LX. https:\/\/www.netronome.com\/media\/documents\/PB_Agilio_LX_2x40GbE-7-20.pdf"},{"key":"e_1_3_2_2_14_1","unstructured":"Netronome MicroC. https:\/\/cdn.open-nfp.org\/media\/documents\/the-joy-of-micro-c_fcjSfra.pdf  Netronome MicroC. https:\/\/cdn.open-nfp.org\/media\/documents\/the-joy-of-micro-c_fcjSfra.pdf"},{"key":"e_1_3_2_2_15_1","unstructured":"Netronome NFP-6000 Flow Processor. https:\/\/www.netronome.com\/media\/documents\/PB_NFP-6000-7-20.pdf  Netronome NFP-6000 Flow Processor. https:\/\/www.netronome.com\/media\/documents\/PB_NFP-6000-7-20.pdf"},{"key":"e_1_3_2_2_16_1","unstructured":"NMAP. https:\/\/nmap.org\/  NMAP. https:\/\/nmap.org\/"},{"key":"e_1_3_2_2_17_1","unstructured":"NVIDIA Mellanox BlueField. https:\/\/www.mellanox.com\/files\/doc-2020\/pb-bluefield-vpi-smart-nic.pdf  NVIDIA Mellanox BlueField. https:\/\/www.mellanox.com\/files\/doc-2020\/pb-bluefield-vpi-smart-nic.pdf"},{"key":"e_1_3_2_2_18_1","unstructured":"OpenSOC. http:\/\/opensoc.github.io\/  OpenSOC. http:\/\/opensoc.github.io\/"},{"key":"e_1_3_2_2_19_1","unstructured":"PROFILING CPU USAGE IN REAL TIME WITH PERF TOP. https:\/\/access.redhat.com\/documentation\/en-us\/red_hat_enterprise_linux\/8\/html\/monitoring_and_managing_system_status_and_performance\/profiling-cpu-usage-in-real-time-with-top_monitoring-and-managing-system-status-and-performance  PROFILING CPU USAGE IN REAL TIME WITH PERF TOP. https:\/\/access.redhat.com\/documentation\/en-us\/red_hat_enterprise_linux\/8\/html\/monitoring_and_managing_system_status_and_performance\/profiling-cpu-usage-in-real-time-with-top_monitoring-and-managing-system-status-and-performance"},{"key":"e_1_3_2_2_20_1","unstructured":"Redis. https:\/\/redis.io\/  Redis. https:\/\/redis.io\/"},{"key":"e_1_3_2_2_21_1","unstructured":"Slowloris. https:\/\/www.cloudflare.com\/learning\/ddos\/ddos-attack-tools\/slowloris\/  Slowloris. https:\/\/www.cloudflare.com\/learning\/ddos\/ddos-attack-tools\/slowloris\/"},{"key":"e_1_3_2_2_22_1","unstructured":"TCPRewrite. https:\/\/linux.die.net\/man\/1\/tcprewrite  TCPRewrite. https:\/\/linux.die.net\/man\/1\/tcprewrite"},{"key":"e_1_3_2_2_23_1","unstructured":"Towards Machine Learning Inference in the Data Plane. https:\/\/www.diva-portal.org\/smash\/get\/diva2:1328601\/FULLTEXT01.pdf  Towards Machine Learning Inference in the Data Plane. https:\/\/www.diva-portal.org\/smash\/get\/diva2:1328601\/FULLTEXT01.pdf"},{"key":"e_1_3_2_2_24_1","unstructured":"Zeek FTP Bruteforcing. https:\/\/docs.zeek.org\/en\/v3.2.4\/scripts\/policy\/protocols\/ftp\/detect-bruteforcing.zeek.html  Zeek FTP Bruteforcing. https:\/\/docs.zeek.org\/en\/v3.2.4\/scripts\/policy\/protocols\/ftp\/detect-bruteforcing.zeek.html"},{"key":"e_1_3_2_2_25_1","unstructured":"Zeek HTTP Stalling Detection. https:\/\/github.com\/corelight\/http-stalling-detector  Zeek HTTP Stalling Detection. https:\/\/github.com\/corelight\/http-stalling-detector"},{"key":"e_1_3_2_2_26_1","unstructured":"Zeek Kerberos. https:\/\/docs.zeek.org\/en\/master\/scripts\/base\/protocols\/krb\/main.zeek.html  Zeek Kerberos. https:\/\/docs.zeek.org\/en\/master\/scripts\/base\/protocols\/krb\/main.zeek.html"},{"key":"e_1_3_2_2_27_1","unstructured":"The Zeek Network Security Monitor. https:\/\/www.zeek.org\/  The Zeek Network Security Monitor. https:\/\/www.zeek.org\/"},{"key":"e_1_3_2_2_28_1","unstructured":"Zeek SSH Bruteforcing Script. https:\/\/docs.zeek.org\/en\/current\/scripts\/policy\/protocols\/ssh\/detect-bruteforcing.zeek.html  Zeek SSH Bruteforcing Script. https:\/\/docs.zeek.org\/en\/current\/scripts\/policy\/protocols\/ssh\/detect-bruteforcing.zeek.html"},{"key":"e_1_3_2_2_29_1","unstructured":"Zeek SSL Certificate. https:\/\/docs.zeek.org\/en\/lts\/scripts\/policy\/protocols\/ssl\/expiring-certs.zeek.html  Zeek SSL Certificate. https:\/\/docs.zeek.org\/en\/lts\/scripts\/policy\/protocols\/ssl\/expiring-certs.zeek.html"},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-32833-1_214"},{"key":"e_1_3_2_2_31_1","volume-title":"2018 USENIX Annual Technical Conference (USENIX ATC 18)","author":"Andr\u00e9 Fabien","year":"2018","unstructured":"Fabien Andr\u00e9 , St\u00e9phane Gouache , Nicolas Le Scouarnec , and Antoine Monsifrot . 2018 . Don't share, Don't lock: Large-scale Software Connection Tracking with Krononat . In 2018 USENIX Annual Technical Conference (USENIX ATC 18) . USENIX Association, Boston, MA, 453--466. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/andre Fabien Andr\u00e9, St\u00e9phane Gouache, Nicolas Le Scouarnec, and Antoine Monsifrot. 2018. Don't share, Don't lock: Large-scale Software Connection Tracking with Krononat. In 2018 USENIX Annual Technical Conference (USENIX ATC 18). USENIX Association, Boston, MA, 453--466. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/andre"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095890.1095918"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"crossref","unstructured":"Diogo Barradas Nuno Santos Lu\u00eds Rodrigues S. Signorello Fernando M. V. Ramos and Andr\u00e9 Madeira. 2021. FlowLens: Enabling Efficient Flow Classification for ML-based Network Security Applications. In NDSS.  Diogo Barradas Nuno Santos Lu\u00eds Rodrigues S. Signorello Fernando M. V. Ramos and Andr\u00e9 Madeira. 2021. FlowLens: Enabling Efficient Flow Classification for ML-based Network Security Applications. In NDSS.","DOI":"10.14722\/ndss.2021.24067"},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3387514.3405894"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879175"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/FCCM.2019.00025"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3229584.3229586"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3359989.3365408"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3387514.3405865"},{"key":"e_1_3_2_2_40_1","unstructured":"B. Claise. 2004. Cisco Systems NetFlow Services Export Version 9. RFC 3954. RFC Editor. http:\/\/www.rfc-editor.org\/rfc\/rfc3954.txt http:\/\/www.rfc-editor.org\/rfc\/rfc3954.txt.  B. Claise. 2004. Cisco Systems NetFlow Services Export Version 9. RFC 3954. RFC Editor. http:\/\/www.rfc-editor.org\/rfc\/rfc3954.txt http:\/\/www.rfc-editor.org\/rfc\/rfc3954.txt."},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/872757.872838"},{"key":"e_1_3_2_2_42_1","volume-title":"15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18)","author":"Dalton Michael","year":"2018","unstructured":"Michael Dalton , David Schultz , Jacob Adriaens , Ahsan Arefin , Anshuman Gupta , Brian Fahs , Dima Rubinstein , Enrique Cauich Zermeno , Erik Rubow , James Alexander Docauer , Jesse Alpert , Jing Ai , Jon Olson , Kevin DeCabooter , Marc de Kruijf , Nan Hua , Nathan Lewis , Nikhil Kasinadhuni , Riccardo Crepaldi , Srinivas Krishnan , Subbaiah Venkata , Yossi Richter , Uday Naik , and Amin Vahdat . 2018 . Andromeda: Performance, Isolation, and Velocity at Scale in Cloud Network Virtualization . In 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18) . USENIX Association, Renton, WA, 373--387. https:\/\/www.usenix.org\/conference\/nsdi18\/presentation\/dalton Michael Dalton, David Schultz, Jacob Adriaens, Ahsan Arefin, Anshuman Gupta, Brian Fahs, Dima Rubinstein, Enrique Cauich Zermeno, Erik Rubow, James Alexander Docauer, Jesse Alpert, Jing Ai, Jon Olson, Kevin DeCabooter, Marc de Kruijf, Nan Hua, Nathan Lewis, Nikhil Kasinadhuni, Riccardo Crepaldi, Srinivas Krishnan, Subbaiah Venkata, Yossi Richter, Uday Naik, and Amin Vahdat. 2018. Andromeda: Performance, Isolation, and Velocity at Scale in Cloud Network Virtualization. In 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18). USENIX Association, Renton, WA, 373--387. https:\/\/www.usenix.org\/conference\/nsdi18\/presentation\/dalton"},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2922196"},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863992"},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815675.2815692"},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/505202.505212"},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/LANMAN49260.2020.9153279"},{"key":"e_1_3_2_2_48_1","volume-title":"Azure Accelerated Networking: SmartNICs in the Public Cloud. In 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18)","author":"Firestone Daniel","year":"2018","unstructured":"Daniel Firestone , Andrew Putnam , Sambhrama Mundkur , Derek Chiou , Alireza Dabagh , Mike Andrewartha , Hari Angepat , Vivek Bhanu , Adrian Caulfield , Eric Chung , Harish Kumar Chandrappa , Somesh Chaturmohta , Matt Humphrey , Jack Lavier , Norman Lam , Fengfen Liu , Kalin Ovtcharov , Jitu Padhye , Gautham Popuri , Shachar Raindel , Tejas Sapre , Mark Shaw , Gabriel Silva , Madhan Sivakumar , Nisheeth Srivastava , Anshuman Verma , Qasim Zuhair , Deepak Bansal , Doug Burger , Kushagra Vaid , David A. Maltz , and Albert Greenberg . 2018 . Azure Accelerated Networking: SmartNICs in the Public Cloud. In 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18) . USENIX Association, Renton, WA, 51--66. https:\/\/www.usenix.org\/conference\/nsdi18\/presentation\/firestone Daniel Firestone, Andrew Putnam, Sambhrama Mundkur, Derek Chiou, Alireza Dabagh, Mike Andrewartha, Hari Angepat, Vivek Bhanu, Adrian Caulfield, Eric Chung, Harish Kumar Chandrappa, Somesh Chaturmohta, Matt Humphrey, Jack Lavier, Norman Lam, Fengfen Liu, Kalin Ovtcharov, Jitu Padhye, Gautham Popuri, Shachar Raindel, Tejas Sapre, Mark Shaw, Gabriel Silva, Madhan Sivakumar, Nisheeth Srivastava, Anshuman Verma, Qasim Zuhair, Deepak Bansal, Doug Burger, Kushagra Vaid, David A. Maltz, and Albert Greenberg. 2018. Azure Accelerated Networking: SmartNICs in the Public Cloud. In 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18). USENIX Association, Renton, WA, 51--66. https:\/\/www.usenix.org\/conference\/nsdi18\/presentation\/firestone"},{"key":"e_1_3_2_2_49_1","unstructured":"Linux Foundation. Data Plane Development Kit (DPDK). http:\/\/www.dpdk.org  Linux Foundation. Data Plane Development Kit (DPDK). http:\/\/www.dpdk.org"},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3230543.3230555"},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3230543.3230559"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3387514.3405877"},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516719"},{"key":"e_1_3_2_2_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3265723.3265731"},{"key":"e_1_3_2_2_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301325"},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89173-4_16"},{"key":"e_1_3_2_2_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3387514.3405855"},{"key":"e_1_3_2_2_58_1","volume-title":"Survey: Intrusion Detection Systems in Encrypted Traffic. In Internet of Things","author":"Kovanen Tiina","year":"2016","unstructured":"Tiina Kovanen , Gil David , and Timo H\u00e4m\u00e4l\u00e4inen . 2016 . Survey: Intrusion Detection Systems in Encrypted Traffic. In Internet of Things , Smart Spaces, and Next Generation Networks and Systems, Olga Galinina, Sergey Balandin, and Yevgeni Koucheryavy (Eds.). Springer International Publishing , Cham , 281--293. Tiina Kovanen, Gil David, and Timo H\u00e4m\u00e4l\u00e4inen. 2016. Survey: Intrusion Detection Systems in Encrypted Traffic. In Internet of Things, Smart Spaces, and Next Generation Networks and Systems, Olga Galinina, Sergey Balandin, and Yevgeni Koucheryavy (Eds.). Springer International Publishing, Cham, 281--293."},{"key":"e_1_3_2_2_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/948205.948236"},{"key":"e_1_3_2_2_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863966"},{"key":"e_1_3_2_2_61_1","volume-title":"Proceedings of the 2015 USENIX Conference on Usenix Annual Technical Conference (USENIX ATC '15). USENIX Association, USA, 445--457","author":"Lee Jihyung","year":"2015","unstructured":"Jihyung Lee , Sungryoul Lee , Junghee Lee , Yung Yi , and KyoungSoo Park . 2015 . FloSIS: A Highly Scalable Network Flow Capture System for Fast Retrieval and Storage Efficiency . In Proceedings of the 2015 USENIX Conference on Usenix Annual Technical Conference (USENIX ATC '15). USENIX Association, USA, 445--457 . Jihyung Lee, Sungryoul Lee, Junghee Lee, Yung Yi, and KyoungSoo Park. 2015. FloSIS: A Highly Scalable Network Flow Capture System for Fast Retrieval and Storage Efficiency. In Proceedings of the 2015 USENIX Conference on Usenix Annual Technical Conference (USENIX ATC '15). USENIX Association, USA, 445--457."},{"key":"e_1_3_2_2_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3341302.3342079"},{"key":"e_1_3_2_2_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/3341302.3342076"},{"key":"e_1_3_2_2_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/2934872.2934906"},{"key":"e_1_3_2_2_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098824"},{"key":"e_1_3_2_2_66_1","volume-title":"AccelTCP: Accelerating Network Applications with Stateful TCP Offloading. In 17th USENIX Symposium on Networked Systems Design and Implementation (NSDI 20)","author":"Moon YoungGyoun","year":"2020","unstructured":"YoungGyoun Moon , SeungEon Lee , Muhammad Asim Jamshed , and Kyoung-Soo Park . 2020 . AccelTCP: Accelerating Network Applications with Stateful TCP Offloading. In 17th USENIX Symposium on Networked Systems Design and Implementation (NSDI 20) . USENIX Association, Santa Clara, CA, 77--92. https:\/\/www.usenix.org\/conference\/nsdi20\/presentation\/moon YoungGyoun Moon, SeungEon Lee, Muhammad Asim Jamshed, and Kyoung-Soo Park. 2020. AccelTCP: Accelerating Network Applications with Stateful TCP Offloading. In 17th USENIX Symposium on Networked Systems Design and Implementation (NSDI 20). USENIX Association, Santa Clara, CA, 77--92. https:\/\/www.usenix.org\/conference\/nsdi20\/presentation\/moon"},{"key":"e_1_3_2_2_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/2934872.2934879"},{"key":"e_1_3_2_2_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098829"},{"key":"e_1_3_2_2_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/3230543.3230560"},{"key":"e_1_3_2_2_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046556.2046570"},{"key":"e_1_3_2_2_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/1254882.1254895"},{"key":"e_1_3_2_2_72_1","volume-title":"Listen and Whisper: Security Mechanisms for BGP. In First Symposium on Networked Systems Design and Implementation (NSDI 04)","author":"Roth Volker","unstructured":"Volker Roth and Randy H. Katz . 2004 . Listen and Whisper: Security Mechanisms for BGP. In First Symposium on Networked Systems Design and Implementation (NSDI 04) . USENIX Association, San Francisco, CA. https:\/\/www.usenix.org\/conference\/nsdi-04\/listen-and-whisper-security-mechanisms-bgp Volker Roth and Randy H. Katz. 2004. Listen and Whisper: Security Mechanisms for BGP. In First Symposium on Networked Systems Design and Implementation (NSDI 04). USENIX Association, San Francisco, CA. https:\/\/www.usenix.org\/conference\/nsdi-04\/listen-and-whisper-security-mechanisms-bgp"},{"key":"e_1_3_2_2_73_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2010.5462151"},{"key":"e_1_3_2_2_74_1","doi-asserted-by":"publisher","DOI":"10.1145\/1851275.1851215"},{"key":"e_1_3_2_2_75_1","unstructured":"Sumeet Singh C. Estan G. Varghese and S. Savage. 2005. The EarlyBird System for Real-time Detection of Unknown Worms.  Sumeet Singh C. Estan G. Varghese and S. Savage. 2005. The EarlyBird System for Real-time Detection of Unknown Worms."},{"key":"e_1_3_2_2_76_1","doi-asserted-by":"publisher","DOI":"10.1145\/3190508.3190558"},{"key":"e_1_3_2_2_77_1","doi-asserted-by":"publisher","DOI":"10.1109\/FPL.2005.1515770"},{"key":"e_1_3_2_2_78_1","volume-title":"Simplifying Datacenter Network Debugging with PathDump. In 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16)","author":"Tammana Praveen","year":"2016","unstructured":"Praveen Tammana , Rachit Agarwal , and Myungjin Lee . 2016 . Simplifying Datacenter Network Debugging with PathDump. In 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16) . USENIX Association, Savannah, GA, 233--248. https:\/\/www.usenix.org\/conference\/osdi16\/technical-sessions\/presentation\/tammana Praveen Tammana, Rachit Agarwal, and Myungjin Lee. 2016. Simplifying Datacenter Network Debugging with PathDump. In 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16). USENIX Association, Savannah, GA, 233--248. https:\/\/www.usenix.org\/conference\/osdi16\/technical-sessions\/presentation\/tammana"},{"key":"e_1_3_2_2_79_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA.2005.5"},{"key":"e_1_3_2_2_80_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737499"},{"key":"e_1_3_2_2_81_1","doi-asserted-by":"publisher","DOI":"10.1145\/37499.37504"},{"key":"e_1_3_2_2_82_1","unstructured":"Nicholas Weaver Robin Sommer and Vern Paxson. 2009. Detecting forged TCP reset packets.  Nicholas Weaver Robin Sommer and Vern Paxson. 2009. Detecting forged TCP reset packets."},{"key":"e_1_3_2_2_83_1","unstructured":"S. Woo and K. Park. 2012. Scalable TCP Session Monitoring with Symmetric Receive-side Scaling.  S. Woo and K. Park. 2012. Scalable TCP Session Monitoring with Symmetric Receive-side Scaling."},{"key":"e_1_3_2_2_84_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Xing Jiarong","year":"2020","unstructured":"Jiarong Xing , Qiao Kang , and Ang Chen . 2020 . NetWarden: Mitigating Network Covert Channels while Preserving Performance . In 29th USENIX Security Symposium (USENIX Security 20) . USENIX Association , 2039--2056. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/xing Jiarong Xing, Qiao Kang, and Ang Chen. 2020. NetWarden: Mitigating Network Covert Channels while Preserving Performance. In 29th USENIX Security Symposium (USENIX Security 20). USENIX Association, 2039--2056. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/xing"},{"key":"e_1_3_2_2_85_1","doi-asserted-by":"publisher","DOI":"10.1145\/3230543.3230544"},{"key":"e_1_3_2_2_86_1","first-page":"29","article-title":"Software Defined Traffic Measurement with OpenSketch. In Presented as part of the 10th USENIX Symposium on Networked Systems Design and Implementation (NSDI 13). USENIX","author":"Yu Minlan","year":"2013","unstructured":"Minlan Yu , Lavanya Jose , and Rui Miao . 2013 . Software Defined Traffic Measurement with OpenSketch. In Presented as part of the 10th USENIX Symposium on Networked Systems Design and Implementation (NSDI 13). USENIX , Lombard , IL , 29 -- 42 . https:\/\/www.usenix.org\/conference\/nsdi13\/technical-sessions\/presentation\/yu Minlan Yu, Lavanya Jose, and Rui Miao. 2013. Software Defined Traffic Measurement with OpenSketch. In Presented as part of the 10th USENIX Symposium on Networked Systems Design and Implementation (NSDI 13). USENIX, Lombard, IL, 29--42. https:\/\/www.usenix.org\/conference\/nsdi13\/technical-sessions\/presentation\/yu","journal-title":"Lombard"},{"key":"e_1_3_2_2_87_1","doi-asserted-by":"publisher","DOI":"10.1109\/NAS.2010.53"},{"key":"e_1_3_2_2_88_1","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098830"},{"key":"e_1_3_2_2_89_1","doi-asserted-by":"publisher","DOI":"10.1145\/3387514.3405869"},{"key":"e_1_3_2_2_90_1","doi-asserted-by":"publisher","DOI":"10.1145\/3131365.3131375"},{"key":"e_1_3_2_2_91_1","volume-title":"14th USENIX Symposium on Operating Systems Design and Implementation (OSDI 20)","author":"Zhao Zhipeng","year":"2020","unstructured":"Zhipeng Zhao , Hugo Sadok , Nirav Atre , James C. Hoe , Vyas Sekar , and Justine Sherry . 2020 . Achieving 100Gbps Intrusion Prevention on a Single Server . In 14th USENIX Symposium on Operating Systems Design and Implementation (OSDI 20) . USENIX Association, 1083--1100. https:\/\/www.usenix.org\/conference\/osdi20\/presentation\/zhao-zhipeng Zhipeng Zhao, Hugo Sadok, Nirav Atre, James C. Hoe, Vyas Sekar, and Justine Sherry. 2020. Achieving 100Gbps Intrusion Prevention on a Single Server. In 14th USENIX Symposium on Operating Systems Design and Implementation (OSDI 20). USENIX Association, 1083--1100. https:\/\/www.usenix.org\/conference\/osdi20\/presentation\/zhao-zhipeng"},{"key":"e_1_3_2_2_92_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2762825"}],"event":{"name":"CoNEXT '21: The 17th International Conference on emerging Networking EXperiments and Technologies","location":"Virtual Event Germany","acronym":"CoNEXT '21","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the 17th International Conference on emerging Networking EXperiments and Technologies"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3485983.3494861","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3485983.3494861","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3485983.3494861","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:12:31Z","timestamp":1750191151000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3485983.3494861"}},"subtitle":["accurate traffic analysis and flow-state tracking for intrusion prevention using SmartNICs"],"short-title":[],"issued":{"date-parts":[[2021,12,2]]},"references-count":92,"alternative-id":["10.1145\/3485983.3494861","10.1145\/3485983"],"URL":"https:\/\/doi.org\/10.1145\/3485983.3494861","relation":{},"subject":[],"published":{"date-parts":[[2021,12,2]]},"assertion":[{"value":"2021-12-03","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}