Sketch-guided filtering support for detecting superspreaders in high-speed networks
A sketch-guided filtering scheme for assisting superspreader detection in the measurement of high-speed network traffic is proposed. The scheme comprises of an array of linear-counting sketches that rapidly eliminates flows with potentially low fan-out during a measurement interval. Based on the results of simulations obtained using real-world network traces, the filter can eliminate up to 90% of the flows of non-superspreader sources and improve the accuracy of superspreader identification. Furthermore, the proposed scheme has a smaller fan-out estimation error and consumes less memory than previously developed approaches. The hardware implementation can process network traffic at a throughput of 27 Gbit/s.