Abstract:Information and Communication Technologies (ICT) infrastructures are becoming increasingly complex day by day, facing numerous challenges to support the latest networking paradigms. Security is undeniably a critical component for the effective functioning of these advanced ICT infrastructures. By considering the current network security challenges, we propose SmartX Intelligent Sec, an innovative intelligent security framework. SmartX Intelligent Sec leverages a combination of the lightweight extended Berkeley Packet Filter/eXpress Data Path (eBPF/XDP) for efficient network packet capturing and filtering malicious network traffic, and a Bidirectional Long Short-Term Memory (BiLSTM) classifier for network threat detection. Our real-time prototype demonstrates that SmartX Intelligent Sec offers comprehensive automation features, enabling continuous network packet capturing, effective network threat detection, and efficient filtering of malicious network traffic. This framework ensures enhanced security and operational efficiency for modern ICT infrastructures.

What problem does this paper attempt to address?

This paper attempts to address the complexity and cybersecurity challenges currently faced by information and communication technology (ICT) infrastructure. Specifically, with the increasing complexity and frequency of cyber - attacks (such as distributed denial - of - service (DDoS) attacks), traditional security measures appear to be insufficient in dealing with modern threats. Therefore, this article proposes an innovative intelligent security framework named SmartX Intelligent Sec, aiming to improve network security by combining the lightweight extended Berkeley Packet Filter / eXpress Data Path (eBPF/XDP) and bidirectional long - short - term memory (BiLSTM) classifier. ### Main issues: 1. **Complex ICT infrastructure**: As the network architecture becomes more complex, it is more difficult to support the latest network paradigms. 2. **Cybersecurity challenges**: Especially in the face of advanced cyber - attacks such as DDoS, traditional security measures are difficult to effectively respond. 3. **Real - time and efficiency**: A solution that can achieve real - time threat detection and efficient malicious traffic filtering is required. ### Main features of SmartX Intelligent Sec: - **eBPF/XDP**: It is used for efficient network packet capture and filtering of malicious traffic. eBPF/XDP is a lightweight, high - performance technology that can efficiently process network packets in the Linux kernel. - **BiLSTM classifier**: It is used for network threat detection. BiLSTM is a deep - learning model that can process data in both forward and reverse directions, thereby more accurately identifying network threats. ### Experimental results: - **Accuracy**: The BiLSTM model performs excellently in threat detection, with an accuracy rate of 99.3%, an F - score of 99.3%, and an ROC - AUC of 99.9%. - **Performance**: In the DDoS attack simulation experiment, eBPF/XDP can filter out 2,295,337 malicious packets within 15 seconds, demonstrating its efficient threat mitigation ability. ### Summary: SmartX Intelligent Sec, by combining eBPF/XDP and BiLSTM, provides a comprehensive, automated, and efficient network security solution that can achieve real - time network packet capture, threat detection, and malicious traffic filtering, significantly enhancing the security and operational efficiency of modern ICT infrastructure.

SmartX Intelligent Sec: A Security Framework Based on Machine Learning and eBPF/XDP

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

Network Safeguard System Based on IDXP

An Adaptive End-to-End IoT Security Framework Using Explainable AI and LLMs

Strategizing IoT Network Layer Security Through Advanced Intrusion Detection Systems and AI-Driven Threat Analysis

Smart infrastructure design: Machine learning solutions for securing modern cities

An optimized model for network intrusion detection systems in industry 4.0 using XAI based Bi-LSTM framework

Advancing Network Security: A Comprehensive Testbed and Dataset for Machine Learning-Based Intrusion Detection

A Security Framework to Protect Edge Supported Software Defined Internet of Things Infrastructure.

An Artificial Intelligence-based Proactive Network Forensic Framework

A Testbed for Intelligent Software Defined Security Framework

AI-Enhanced VPN Security Framework: Integrating Open-Source Threat Intelligence and Machine Learning to Secure Digital Networks

A Secure, Intelligent, and Smart-Sensing Approach for Industrial System Automation and Transmission over Unsecured Wireless Networks

A Comprehensive Security Framework for Asymmetrical IoT Network Environments to Monitor and Classify Cyberattack via Machine Learning

E-XAI: Evaluating Black-Box Explainable AI Frameworks for Network Intrusion Detection

AI Cyber Defense and eBPF

Automated Security Assessment for the Internet of Things

Security-Aware Data-Driven Intelligent Transportation Systems

Design of Intrusion Detection System based on Cyborg intelligence for security of Cloud Network Traffic of Smart Cities

Design and implementation of intelligent packet filtering in IoT microcontroller-based devices

Intelligent Physical Layer Security Approach for V2X Communication