Wednesday, September 2, 2009

Netflix method for security?

Filtering Network Attacks With a 'Netflix' Method
Dark Reading (08/28/09) Higgins, Jackson

University of California, Irvine (UC Irvine) researchers have developed a new method for blacklisting spam, distributed denial-of-service attacks, worms, and other network attacks. The predictive blacklisting method, which was inspired by Netflix's moving ratings-recommendation system, uses a combination of factors to improve blacklisting, including trends in the times of attacks, geographical locations and IP address blocks, and any connections between the attacker and the victim, such as if an attacker has previously challenged the victim's network. UC Irvine professor Athina Markopoulou says the predictive blacklisting method "formalizes the blacklisting problem" in regards to predicting the sources of attacks. The researchers found that their method improves predictive blacklisting, accurately predicting up to 70 percent of attacks. "The hit-count of our combined method improves the hit-count of the state of the art for every single day," Markopoulou says. She says the method could be applied to security logs gathered by firewalls, for example, helping an enterprise better defend itself against attacks. The researchers tested their algorithms using hundreds of millions of logs from hundreds of networks, gathered over a one-month period. Markopoulou says the next step is to improve the prediction rate and to understand how attackers could evade the prediction method.

Full Article @
http://www.darkreading.com/security/perimeter/showArticle.jhtml?articleID=219500483&cid=nl_DR_DAILY_H

Internet Searches much Faster with new System

Faster Searches Key to a Greener Web University of Glasgow (United Kingdom) (08/31/09) Forsyth, Stuart

University of Glasgow researchers created a system using field programmable gate arrays (FPGAs) to search a document index 20 times faster than a system based on standard processors. The researchers plan to develop the system for use in Web servers to speed up Internet searches, which they say would reduce the Internet's energy consumption and carbon cost. Estimates for the amount of carbon dioxide generated by a single Internet search request range from 0.2g per search, according to Google, to 7g per search, according to Harvard University physicist Alex Wisser-Gross. "Few people stop to think about the carbon costs of their computing," says project researcher Wim Vanderbauwhede. "By making Internet searches faster, servers will use less energy to produce results, even if the power consumption of the actual equipment is the same because they will use that energy for a fraction of the time." The researchers found that a system of two Xilinx FPGAs running the information retrieval and filtering algorithms for a document database were 20 times faster in returning results than a dual-core Intel Itanium-2 processor, and consumed only 1.25 watts each compared to the 130 watts consumed by the Itanium processor. The researchers plan to improve the performance of the current prototype and test it in a data center environment.

Full Article @
http://www.gla.ac.uk/news/headline_128603_en.html

SDSC Dashes Forward with New Flash Memory Computer System

The University of California, San Diego's (UCSD's) San Diego Supercomputer Center (SDSC) recently unveiled Dash, a flash memory-based supercomputer designed to accelerate research in a variety of data-intensive science problems. Dash is part of the Triton Resource, an integrated data-intensive resource that was launched earlier this summer for use by the University of California system. Dash, which has a peak speed of 5.2 teraflops, is the first supercomputer to use flash memory technology in a high-performance computing system. "Dash's use of flash memory for fast file-access and swap space--as opposed to spinning disks that have much slower latency or I/O times--along with vSMP capabilities for large shared memory will facilitate scientific research," says SDSC's Michael Norman. "Today's high-performance instruments, simulations, and sensor networks are creating a deluge of data that presents formidable challenges to store and analyze; challenges that Dash helps to overcome." SDSC's Allan Snavely says Dash is capable of performing random data access one order-of-magnitude faster than other machines, allowing it to solve data-mining problems that are looking for the "needle in the haystack" up to 10 times faster than even larger supercomputers that use spinning disk technology.

Full Article @
http://ucsdnews.ucsd.edu/newsrel/supercomputer/09-09HPC.asp