{"id":124,"date":"2023-12-15T20:30:31","date_gmt":"2023-12-16T01:30:31","guid":{"rendered":"https:\/\/carleton.ca\/sci-lab\/?p=124"},"modified":"2026-08-06T14:47:42","modified_gmt":"2026-08-06T18:47:42","slug":"paper-published-oblivious-network-intrusion-detection-systems","status":"publish","type":"post","link":"https:\/\/carleton.ca\/sci-lab\/2023\/paper-published-oblivious-network-intrusion-detection-systems\/","title":{"rendered":"Paper Published: Oblivious network intrusion detection systems"},"content":{"rendered":"\n<section class=\"w-screen px-6 cu-section cu-section--white ml-offset-center md:px-8 lg:px-14\">\n    <div class=\"space-y-6 cu-max-w-child-5xl  md:space-y-10 cu-prose-first-last\">\n\n            <div class=\"cu-textmedia flex flex-col lg:flex-row mx-auto gap-6 md:gap-10 my-6 md:my-12 first:mt-0 max-w-5xl\">\n        <div class=\"justify-start cu-textmedia-content cu-prose-first-last\" style=\"flex: 0 0 100%;\">\n            <header class=\"font-light prose-xl cu-pageheader md:prose-2xl cu-component-updated cu-prose-first-last\">\n                                    <h1 class=\"cu-prose-first-last font-semibold !mt-2 mb-4 md:mb-6 relative after:absolute after:h-px after:bottom-0 after:bg-cu-red after:left-px text-3xl md:text-4xl lg:text-5xl lg:leading-[3.5rem] pb-5 after:w-10 text-cu-black-700 not-prose\">\n                        Paper Published: Oblivious network intrusion detection systems\n                    <\/h1>\n                \n                                \n                            <\/header>\n\n                    <\/div>\n\n            <\/div>\n\n    <\/div>\n<\/section>\n\n<p class=\"wp-block-paragraph\">Our recently published paper &#8211; Mahmoud AbdelHafeez Sayed, and Mostafa Taha. &#8220;<em><strong>Oblivious network intrusion detection systems.<\/strong><\/em>&#8221; <i>Scientific Reports<\/i> 13.1 (2023): 22308. https:\/\/doi.org\/10.1038\/s41598-023-48475-w &#8211; is an updated and more comprehensive journal version of the conference paper &#8220;Oblivious Intrusion Detection Systems&#8221; published in HOST 2022.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A main function of network intrusion detection systems (NIDSs) is to monitor network traffic and match it against rules. Oblivious NIDSs (O-NIDS) perform the same tasks of NIDSs but they use encrypted rules and produce encrypted results without being able to decrypt the rules or the results. Current implementations of O-NIDS suffer from slow searching speeds and\/or lack of generality. In this paper, we present a generic approach to implement a privacy-preserving O-NIDS based on hybrid binary gates. We also present two resource-flexible algorithm bundles built upon the hybrid binary gates to perform the NIDS\u2019s essential tasks of direct matching and range matching as a proof of concept. Our approach utilizes a Homomorphic Encryption (HE) layer in an abstract fashion, which makes it implementable by many HE schemes compared to the state-of-the-art where the underlying HE scheme is a core part of the approach. This feature allowed the use of already-existing HE libraries that utilize parallelization techniques in GPUs for faster performance. We achieved a rule encryption time as low as 0.012% of the state of the art with only 0.047% of its encrypted rule size. Also, we achieved a rule-matching speed that is almost 20,000 times faster than the state of the art.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Our recently published paper &#8211; Mahmoud AbdelHafeez Sayed, and Mostafa Taha. &#8220;Oblivious network intrusion detection systems.&#8221; Scientific Reports 13.1 (2023): 22308. https:\/\/doi.org\/10.1038\/s41598-023-48475-w &#8211; is an updated and more comprehensive journal version of the conference paper &#8220;Oblivious Intrusion Detection Systems&#8221; published in HOST 2022. A main function of network intrusion detection systems (NIDSs) is to monitor [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[22],"tags":[],"class_list":["post-124","post","type-post","status-publish","format-standard","hentry","category-news"],"acf":{"cu_post_thumbnail":"https:\/\/cdn.carleton.ca\/truth\/images\/1919\/article-print.jpg"},"_links":{"self":[{"href":"https:\/\/carleton.ca\/sci-lab\/wp-json\/wp\/v2\/posts\/124","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/carleton.ca\/sci-lab\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/carleton.ca\/sci-lab\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/carleton.ca\/sci-lab\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/carleton.ca\/sci-lab\/wp-json\/wp\/v2\/comments?post=124"}],"version-history":[{"count":2,"href":"https:\/\/carleton.ca\/sci-lab\/wp-json\/wp\/v2\/posts\/124\/revisions"}],"predecessor-version":[{"id":138,"href":"https:\/\/carleton.ca\/sci-lab\/wp-json\/wp\/v2\/posts\/124\/revisions\/138"}],"wp:attachment":[{"href":"https:\/\/carleton.ca\/sci-lab\/wp-json\/wp\/v2\/media?parent=124"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/carleton.ca\/sci-lab\/wp-json\/wp\/v2\/categories?post=124"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/carleton.ca\/sci-lab\/wp-json\/wp\/v2\/tags?post=124"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}