Type of Document	Dissertation
Author	Acharya, Subrata
URN	etd-07092008-135737
Title	Dynamic Traffic Driven Architectures and Algorithms for Securing Networks
Degree	Doctor of Philosophy
Program	Computer Science
School	School of Arts and Sciences
Advisory Committee	Advisor Name Title Taieb Znati Committee Chair Alexandros Labrinidis Committee Member Ehab Al-Shaer Committee Member Rami Melhem Committee Member
Keywords	Sentinel Distributed Denial-of-Service Attack Network Security Collaborative Hierarchical Firewall Optimization Computer Networks
Date of Defense	2008-08-08
Availability	restricted
Abstract The continuous growth in the Internet's size, the amount of data traffic, and the complexity of processing this traffic gives rise to new challenges in building high performance network devices. Such an exponential growth coupled with the increasing sophistication of attacks, is placing stringent demands on the performance of networked systems (Firewalls). These challenges require new designs, architecture and algorithms for the optimization of such systems. The current or classical security of present day Internet is "static" and "oblivious" to traffic dynamics in the network. Hence, there are tremendous efforts towards the design and development of several techniques and strategies to deal with the above shortcomings. Unfortunately, the current solutions have been successful in addressing only some aspects of security. However, as a whole security remains a major issue. This is primarily due to the lack of adaptation and dynamics in the design of such intrusion detection and mitigation systems. This thesis focuses on the design of architectures and algorithms for the optimization of such networked systems, to aid not only adaptive and real-time "packet filtering' but also fast "content based routing (differentiated services)' in today's data-driven networks. The approach proposed involves a unique combination of algorithmic and architectural techniques that aims to outperform all current solutions in terms of adaptiveness, speed of operation (under attack or heavily loaded conditions) and overall operational cost-effectiveness of such systems. The tools proposed in this thesis also aim to offer the flexibility to include new approaches, and provide the ability to migrate or deploy additional entities for attack detection and defense.
Files	Filename       Size       Approximate Download Time (Hours:Minutes:Seconds)     28.8 Modem   56K Modem   ISDN (64 Kb)   ISDN (128 Kb)   Higher-speed Access  Final_Acharya_Subrata_August_2008.pdf 1.12 Mb 00:05:10 00:02:39 00:02:19 00:01:09 00:00:05 indicates that a file or directory is accessible from the University of Pittsburgh network only.

If you have questions or comments please send mail to ETD-Feedback or view
the University of Pittsburgh Electronic Theses and Dissertations (ETD) Project page.