Data Classification Hardware Acceleration

Ivan ManuylovSenior Software Developer, DLP ResearchKaspersky LabSecurity Analyst Summit 2013, Puerto Rico

Security Analyst Summit 2013, Puerto Rico

Speed

PAGE 2

Security Analyst Summit 2013, Puerto Rico

Speed

PAGE 3

Security Analyst Summit 2013, Puerto Rico

Speed?

PAGE 4

Security Analyst Summit 2013, Puerto Rico

Speed?

PAGE 5

Security Analyst Summit 2013, Puerto Rico

Speed?

PAGE 6

Security Analyst Summit 2013, Puerto Rico

Speed?

PAGE 7

Hardware

Security Analyst Summit 2013, Puerto Rico

Cores

PAGE 9

Who has access to 1000+ cores?

Security Analyst Summit 2013, Puerto Rico

Purpose of GPU

PAGE 10

General Purpose computation on GPU

Security Analyst Summit 2013, Puerto Rico

How to use GPGPU

PAGE 11

Direct ComputeCross platformMulti vendorC kernelLanguages:

C/C++ .NETJavaRubyPython

WindowsMulti vendorHLSL kernelLanguages:

C++C++ AMP .NET

Cross platformNVIDIAC/C++ kernelLanguages:

C/C++ .NETJavaFortranPerlPython

Security Analyst Summit 2013, Puerto Rico

Kernel code

PAGE 12

Using of Hardware Acceleration

Security Analyst Summit 2013, Puerto Rico

Using of Hardware Acceleration

PAGE 14

Research

Security Analyst Summit 2013, Puerto Rico

Hardware

PAGE 16

CPU

Intel Core i5 – 7502.66 GHz4 coresDDR3:

667 MHz12 Gb/s

GPU

NVIDIA GeForce GTS 4501.6 GHz192 coresGDDR5:

1.8 GHz58 Gb/s

Fingerprinting

Security Analyst Summit 2013, Puerto Rico

Fingerprinting

PAGE 18

Security Analyst Summit 2013, Puerto Rico

Fingerprinting

PAGE 19

100 Kb

100 000 hashes

Security Analyst Summit 2013, Puerto Rico

Fingerprinting

PAGE 20

2x faster

Security Analyst Summit 2013, Puerto Rico

0 5000 10000 15000 20000 250000

200

400

600

800

1000

1200

1400

1600

1800

CPUGPU

2x

Fingerprinting

PAGE 21

CPU is better

GPU is better

Keywords

Security Analyst Summit 2013, Puerto Rico

Keywords

PAGE 23

Security Analyst Summit 2013, Puerto Rico

Keywords

PAGE 24

What is the performance boost?

Security Analyst Summit 2013, Puerto Rico

Keywords

PAGE 25

10+ times

What is the performance boost?

Security Analyst Summit 2013, Puerto Rico

Keywords

PAGE 26

0 10000 20000 30000 40000 50000 60000 700000

10000

20000

30000

40000

50000

60000

1000 keywords

CPUGPU10X

GPU is better

Epilogue

Security Analyst Summit 2013, Puerto Rico

Summary

PAGE 28

Fingerprints search 2x

Keywords search 10x

Security Analyst Summit 2013, Puerto Rico

We can do it!

PAGE 29

Data Classification Hardware Acceleration

Thank you!

Ivan Manuylov

Senior Software Developer, DLP Research,

Kaspersky Lab

Ivan.Manuylov@kaspersky.com

Security Analyst Summit 2013, Puerto Rico