GPU based Real-time Super Hosts Detection at Distributed Edge Routers

Abstract: The super host is a special host on the network which contacts with many other hosts during a certain time window. They play important roles in network researches such as scanners detection, resource allocation, spam filtering and so on. How to find super hosts in real time is the foundation of these applications. In this paper, a novel algorithm, denoted as CBAA, is proposed to solve this problem at edge routers. CBAA divides network traffic into different parts. A cube of bits array is devised to store hosts' linking information of different traffic parts when scanning packets. At the end of each time window, CBAA restores super hosts very fast because there are only a fraction of super hosts in each traffic part. CBAA is also a parallel algorithm. It's easy to deploy CBAA in GPU to deal with high-speed network traffic in real time. Experiments on a real-world core network prove the advantage of our algorithm.