CLEF：限制互联网核心中大流量造成的损害（技术报告）
CLEF: Limiting the Damage Caused by Large Flows in the Internet Core (Technical Report)
摘要：
检测发送过量流量的网络流对于实施QoS和对抗DDoS攻击越来越重要。大流量检测以前已经探索过，但所提出的方法可以用于高容量的核心路由器上，只有在显着降低的准确性的成本，由于它们的其他太高的内存和处理开销。我们提出了CLEF，一个新的大流量检测方案，具有低内存需求，保持高精度的高容量的核心路由器的严格条件下。我们比较我们的计划与以前的建议，通过广泛的理论分析，并根据最坏情况下的攻击流量的评估。我们表明，CLEF优于先前提出的系统在有限的内存设置。
英文摘要：
The detection of network flows that send excessive amounts of traffic is of increasing importance to enforce QoS and to counter DDoS attacks. Large-flow detection has been previously explored, but the proposed approaches can be used on high-capacity core routers only at the cost of significantly reduced accuracy, due to their otherwise too high memory and processing overhead. We propose CLEF, a new large-flow detection scheme with low memory requirements, which maintains high accuracy under the strict conditions of high-capacity core routers. We compare our scheme with previous proposals through extensive theoretical analysis, and with an evaluation based on worst-case-scenario attack traffic. We show that CLEF outperforms previously proposed systems in settings with limited memory.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
