Dual Cuckoo Filter with a Low False Positive Rate for Deep Packet Inspection

Elastic Deep Packet Inspection

Deep packet inspection (DPI) systems are required to perform at or near network line-rate speeds, matching thousands of rules against the network traffi c. The engineering performance and price trade-offs are such that DPI is diffi cult to virtualize, either because of very high memory consumption or the use of custom hardware; similarly, a running DPI instance is diffi cult to ‘move’ cheaply t...

Deep Packet Inspection with Regular Expression Matching

Deep packet inspection directs, persists, filters and logs IP-based applications and Web services traffic based on content encapsulated in a packet's header or payload, regardless of the protocol or application type. In content scanning, the packet payload is compared against a set of patterns specified as regular expressions. With deep packet inspection in place through a single intelligent ne...

High Speed Deep Packet Inspection with Hardware

A Survey on Deep Packet Inspection for Intrusion Detection Systems

Deep packet inspection is widely recognized as a powerful way which is used for intrusion detection systems for inspecting, deterring and deflecting malicious attacks over the network. Fundamentally, almost intrusion detection systems have the ability to search through packets and identify contents that match with known attacks. In this paper, we survey the deep packet inspection implementation...

Deep Packet Inspection Using Message Passing Networks

We propose a solution based on message passing bipartite networks, for deep packet inspection, which addresses both speed and memory issues, which are limiting factors in current solutions. We report on a preliminary implementation and propose a parallel architecture. 1 The Problem, Our Solution and Results Packet content scanning at high speed is crucial to network security and network monitor...