Performance testing of GPU-based approximate matching algorithm on network traffic
Jimoh, Mujeeb B.
MetadataShow full item record
Insider threat is one of the risks both government and private organizations have to deal with in protecting their important information. Data exfiltration and data leakage resulting from insiders’ activities can be very difficult to identify and quantify. Unfortunately, existing solutions that efficiently check whether data moving across a network is known to be sensitive are not resilient to attackers that make changes—even trivial modifications—to the data prior to exfiltration. This capstone examines the potential use of the sdhash approximate matching algorithm within the data exfiltration domain. Sdhash can be employed to look for active transfer of known sensitive files in network traffic, but in practice is hindered by the computational time required to check for known sensitive data. This research tested the performance of both the GPU and CPU implementation of sdhash to determine their suitability in high-network traffic environments such as the Department of Defense. The results of this experiment showed that better performance is achieved with the GPU when comparing large data sets. For small data sets, the CPU and GPU implementations exhibited similar performance. Thus, sdhash in the GPU implementation would be suitable for the Defense Department’s use.
Approved for public release; distribution is unlimited
Showing items related by title, author, creator and subject.
Fu Chen-Hua (Monterey, California: Naval Postgraduate School, 1993-03);Efficient performance and high throughput are the major goals of the network performance management. How can we achieve these goal? First, it is necessary to know the network traffic situations. This thesis research ...
Klem, Nicholas (Monterey, California: Naval Postgraduate School, 2014-12);The National Network of Fusion Centers (the Network) is one of many organizational efforts the nation has undergone to help bolster its counterterrorism prevention and response efforts. Since its creation in the years ...
Coleman, William M. (Monterey, California: Naval Postgraduate School, 2014-09);The LPISimNet software tool provides the capability to quantify the performance of sensor network configurations by combining the information and physical domains. To combine the sensor network’s performance in a coherent ...