Hardware acceleration.kl.dlpr.sas.2013 final

30
Data Classification Hardware Acceleration Ivan Manuylov Senior Software Developer, DLP Research Kaspersky Lab Security Analyst Summit 2013, Puerto Rico

Transcript of Hardware acceleration.kl.dlpr.sas.2013 final

Page 1: Hardware acceleration.kl.dlpr.sas.2013   final

Data Classification Hardware Acceleration

Ivan ManuylovSenior Software Developer, DLP ResearchKaspersky LabSecurity Analyst Summit 2013, Puerto Rico

Page 2: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Speed

PAGE 2

Page 3: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Speed

PAGE 3

Page 4: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Speed?

PAGE 4

Page 5: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Speed?

PAGE 5

Page 6: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Speed?

PAGE 6

Page 7: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Speed?

PAGE 7

Page 8: Hardware acceleration.kl.dlpr.sas.2013   final

Hardware

Page 9: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Cores

PAGE 9

Who has access to 1000+ cores?

Page 10: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Purpose of GPU

PAGE 10

General Purpose computation on GPU

Page 11: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

How to use GPGPU

PAGE 11

Direct ComputeCross platformMulti vendorC kernelLanguages:

C/C++ .NETJavaRubyPython

WindowsMulti vendorHLSL kernelLanguages:

C++C++ AMP .NET

Cross platformNVIDIAC/C++ kernelLanguages:

C/C++ .NETJavaFortranPerlPython

Page 12: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Kernel code

PAGE 12

Page 13: Hardware acceleration.kl.dlpr.sas.2013   final

Using of Hardware Acceleration

Page 14: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Using of Hardware Acceleration

PAGE 14

Page 15: Hardware acceleration.kl.dlpr.sas.2013   final

Research

Page 16: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Hardware

PAGE 16

CPU

Intel Core i5 – 7502.66 GHz4 coresDDR3:

667 MHz12 Gb/s

GPU

NVIDIA GeForce GTS 4501.6 GHz192 coresGDDR5:

1.8 GHz58 Gb/s

Page 17: Hardware acceleration.kl.dlpr.sas.2013   final

Fingerprinting

Page 18: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Fingerprinting

PAGE 18

Page 19: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Fingerprinting

PAGE 19

100 Kb

100 000 hashes

Page 20: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Fingerprinting

PAGE 20

2x faster

Page 21: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

0 5000 10000 15000 20000 250000

200

400

600

800

1000

1200

1400

1600

1800

CPUGPU

2x

Fingerprinting

PAGE 21

CPU is better

GPU is better

Page 22: Hardware acceleration.kl.dlpr.sas.2013   final

Keywords

Page 23: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Keywords

PAGE 23

Page 24: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Keywords

PAGE 24

What is the performance boost?

Page 25: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Keywords

PAGE 25

10+ times

What is the performance boost?

Page 26: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Keywords

PAGE 26

0 10000 20000 30000 40000 50000 60000 700000

10000

20000

30000

40000

50000

60000

1000 keywords

CPUGPU10X

GPU is better

Page 27: Hardware acceleration.kl.dlpr.sas.2013   final

Epilogue

Page 28: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

Summary

PAGE 28

Fingerprints search 2x

Keywords search 10x

Page 29: Hardware acceleration.kl.dlpr.sas.2013   final

Security Analyst Summit 2013, Puerto Rico

We can do it!

PAGE 29

Page 30: Hardware acceleration.kl.dlpr.sas.2013   final

Data Classification Hardware Acceleration

Thank you!

Ivan Manuylov

Senior Software Developer, DLP Research,

Kaspersky Lab

[email protected]

Security Analyst Summit 2013, Puerto Rico