Next-Generation Intrusion Prevention System Using Hardware-Accelerated Data Processing Units (DPUs)
To address the growing challenge of real-time DDoS mitigation in edge environments, this paper introduces a hardware-accelerated framework that combines deep learning with Data Processing Unit (DPU) acceleration. We propose a fine-tuned ResNet-18 model, adapted via transfer learning from ImageNet to network traffic analysis, and deploy it on a DPU using TensorFlow Lite quantization for energy-efficient, edge-compatible inference. The framework achieves 99.45% detection accuracy on the CICDDoS2019 dataset while mitigating 95 Gbps of malicious traffic, representing a 4.75× throughput improvement over CPU-based systems. By offloading processing to the DPU, our solution reduces CPU utilization to 25.5%, demonstrating how hardware acceleration improves real-time performance.
Authors
- Filippo Cugini (ORCID: https://orcid.org/0000-0002-9840-0365)
- Francesco Paolucci (ORCID: https://orcid.org/0000-0003-4821-5193)
- P. Castoldi (ORCID: https://orcid.org/0000-0003-4366-0730)
- Rana Abu Bakar
Institutions
- Scuola Superiore Sant'Anna (IT)
- Consorzio Nazionale Interuniversitario per le Telecomunicazioni (IT)
Publication Details
- Published
- 2025-06-08
- DOI
- https://doi.org/10.1109/iccworkshops67674.2025.11162329
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 0.00