Publication

Our new research work “Cerberus” in the area of SPS (Software-defined Programmable Security) is accepted by IEEE S&P’24. This work shows that even with limited resources on existing programmable switches, we can now run multiple concurrent in-network security monitoring tasks so we can defend against diverse, high-volume, and dynamic attacks previous solutions could not handle. Cerberus can actually enhance the concurrency and capacity of programmable switches by an order of magnitude! We’ll release our prototype very soon. Congratulations again for the amazing work, Huancheng!

Our SysFlow work will appear in IEEE Transactions on Information Forensics and Security (TIFS) 2023. SysFlow is the first programmable zero trust (ZT) framework for system security! It presents a novel system security development framework for programmable ZT security control of host system activities at runtime. It offers unprecedented and unified programmability for users to achieve their dynamic security needs. Read our paper (here) and try to use our prototype system here. Now you can build your own security applications on top of that!