Matrix/array analysis of networks can provide significant insight into their behavior and aid in their operation and protection. Prior work has demonstrated the analytic, performance, and compression capabilities of GraphBLAS (graphblas.org) hypersparse matrices and D4M (d4m.mit.edu) associative arrays (a mathematical superset of matrices). Obtaining the benefits of these capabilities requires integrating them into operational systems, which comes with its own unique challenges. This paper describes two examples of real-time operational implementations. First, is an operational GraphBLAS implementation that constructs anonymized hypersparse matrices on a high-bandwidth network tap. Second, is an operational D4M implementation that analyzes daily cloud gateway logs. The architectures of these implementations are presented. Detailed measurements of the resources and the performance are collected and analyzed. The implementations are capable of meeting their operational requirements using modest computational resources (a couple of processing cores). GraphBLAS is well-suited for low-level analysis of high-bandwidth connections with relatively structured network data. D4M is well-suited for higher-level analysis of more unstructured data. This work demonstrates that these technologies can be implemented in operational settings.
@article{arxiv.2309.02464,
title = {Deployment of Real-Time Network Traffic Analysis using GraphBLAS Hypersparse Matrices and D4M Associative Arrays},
author = {Michael Jones and Jeremy Kepner and Andrew Prout and Timothy Davis and William Arcand and David Bestor and William Bergeron and Chansup Byun and Vijay Gadepally and Micheal Houle and Matthew Hubbell and Hayden Jananthan and Anna Klein and Lauren Milechin and Guillermo Morales and Julie Mullen and Ritesh Patel and Sandeep Pisharody and Albert Reuther and Antonio Rosa and Siddharth Samsi and Charles Yee and Peter Michaleas},
journal= {arXiv preprint arXiv:2309.02464},
year = {2023}
}
Comments
Accepted to IEEE HPEC, 8 pages, 8 figures, 1 table, 69 references. arXiv admin note: text overlap with arXiv:2203.13934. text overlap with arXiv:2309.01806