TY  - GEN
UR  - https://doi.org/10.1145/3484266.3487370
PB  - ACM
ID  - discovery10139890
N2  - Data plane programmability is greatly improving network monitoring. Most new proposals rely on controllers pulling information (e.g., sketches or packets) from the data plane. This architecture is not a good fit for tasks requiring high reactivity, such as failure recovery, attack mitigation, and so on. Focusing on these tasks, we argue for a different architecture, where the data plane autonomously detects anomalies and pushes alerts to the controller. As a first step, we demonstrate that statistical checks can be implemented in P4 by revisiting definition and online computation of statistical measures. We collect our techniques in a P4 library, and showcase how they enable in-switch anomaly detection.
A1  - Gao, S
A1  - Handley, M
A1  - Vissicchio, S
CY  - Virtual Event, United Kingdom
EP  - 90
SP  - 84
AV  - public
Y1  - 2021/11/10/
TI  - Stats 101 in P4: Towards In-Switch Anomaly Detection
N1  - This version is the author accepted manuscript. For information on re-use, please refer to the publisher?s terms and conditions.
https://doi.org/
ER  -