使用GraphBLAS超稀疏矩阵和D4M关联数组的实时网络流量分析部署
Deployment of Real-Time Network Traffic Analysis using GraphBLAS Hypersparse Matrices and D4M Associative Arrays
AI总结:
本文通过两个实时操作实例,展示了GraphBLAS超稀疏矩阵和D4M关联数组在网络流量分析中的实际部署,证明其能以适度计算资源满足操作需求。
摘要:
网络的矩阵/数组分析可以提供对其行为的重要洞察,并有助于其操作和保护。先前的工作已经证明了GraphBLAS(graphblas.org)超稀疏矩阵和D4M(d4m.mit.edu)关联数组(矩阵的数学超集)在分析、性能和压缩方面的能力。获得这些能力的好处需要将它们集成到操作系统中,这带来了其独特的挑战。本文描述了实时操作实现的两个示例。首先,是一个操作性的GraphBLAS实现,它在高带宽网络分接点上构建匿名化的超稀疏矩阵。其次,是一个操作性的D4M实现,它分析每日云网关日志。介绍了这些实现的架构。收集并分析了资源和性能的详细测量结果。这些实现能够使用适度的计算资源(几个处理核心)满足其操作要求。GraphBLAS非常适合对具有相对结构化网络数据的高带宽连接进行低级分析。D4M非常适合对更非结构化数据进行更高级别的分析。这项工作证明了这些技术可以在操作环境中实现。
英文摘要:
Matrix/array analysis of networks can provide significant insight into their behavior and aid in their operation and protection. Prior work has demonstrated the analytic, performance, and compression capabilities of GraphBLAS (graphblas.org) hypersparse matrices and D4M (d4m.mit.edu) associative arrays (a mathematical superset of matrices). Obtaining the benefits of these capabilities requires integrating them into operational systems, which comes with its own unique challenges. This paper describes two examples of real-time operational implementations. First, is an operational GraphBLAS implementation that constructs anonymized hypersparse matrices on a high-bandwidth network tap. Second, is an operational D4M implementation that analyzes daily cloud gateway logs. The architectures of these implementations are presented. Detailed measurements of the resources and the performance are collected and analyzed. The implementations are capable of meeting their operational requirements using modest computational resources (a couple of processing cores). GraphBLAS is well-suited for low-level analysis of high-bandwidth connections with relatively structured network data. D4M is well-suited for higher-level analysis of more unstructured data. This work demonstrates that these technologies can be implemented in operational settings.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。