Next-Generation Intrusion Prevention System Using Hardware-Accelerated Data Processing Units (DPUs)

To address the growing challenge of real-time DDoS mitigation in edge environments, this paper introduces a hardware-accelerated framework that combines deep learning with Data Processing Unit (DPU) acceleration. We propose a fine-tuned ResNet-18 model, adapted via transfer learning from ImageNet to network traffic analysis, and deploy it on a DPU using TensorFlow Lite quantization for energy-efficient, edge-compatible inference. The framework achieves 99.45% detection accuracy on the CICDDoS2019 dataset while mitigating 95 Gbps of malicious traffic, representing a 4.75× throughput improvement over CPU-based systems. By offloading processing to the DPU, our solution reduces CPU utilization to 25.5%, demonstrating how hardware acceleration improves real-time performance.

Authors

Institutions

Publication Details

Published
2025-06-08
DOI
https://doi.org/10.1109/iccworkshops67674.2025.11162329
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Next-Generation Intrusion Prevention System Using Hardware-Accelerated Data Processing Units (DPUs)

Filippo Cugini, Francesco Paolucci, P. Castoldi, Rana Abu Bakar
Network Security and Intrusion Detection
article

Next-Generation Intrusion Prevention System Using Hardware-Accelerated Data Processing Units (DPUs)

Filippo Cugini, Francesco Paolucci, P. Castoldi, Rana Abu Bakar
article en

Abstract

To address the growing challenge of real-time DDoS mitigation in edge environments, this paper introduces a hardware-accelerated framework that combines deep learning with Data Processing Unit (DPU) acceleration. We propose a fine-tuned ResNet-18 model, adapted via transfer learning from ImageNet to network traffic analysis, and deploy it on a DPU using TensorFlow Lite quantization for energy-efficient, edge-compatible inference. The framework achieves 99.45% detection accuracy on the CICDDoS2019 dataset while mitigating 95 Gbps of malicious traffic, representing a 4.75× throughput improvement over CPU-based systems. By offloading processing to the DPU, our solution reduces CPU utilization to 25.5%, demonstrating how hardware acceleration improves real-time performance.

Scuola Superiore Sant'Anna (IT), Consorzio Nazionale Interuniversitario per le Telecomunicazioni (IT)
Openalex Percentile: Top 70%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.