Towards High-Performance Intrusion Detection with Robustness Guarantees on Programmable Switches at ISP Scale
SiteGuard, an inline network intrusion detection system with programmable switches specifically developed to protect enterprise campus sites connecting to ISP, is designed and implemented and proposes a dual-plane feature extraction model to extract extensive traffic features at near line-speed.