Deep Packet Inspection on Commodity Hardware using FastFlow

被引:2
|
作者
Danelutto, M. [1 ]
Deri, L. [1 ]
De Sensi, D. [1 ]
Torquati, M. [1 ]
机构
[1] Univ Pisa, Comp Sci Dept, Pisa, Italy
关键词
Network streaming; NetFlow; DPI; FastFlow; multi-core;
D O I
10.3233/978-1-61499-381-0-92
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
The analysis of packet payload is mandatory for network security and traffic monitoring applications. The computational cost of this activity pushed the industry towards hardware-assisted deep packet inspection (DPI) that have the disadvantage of being more expensive and less flexible. This paper covers the design and implementation of a new DPI framework using FastFlow, a skeleton-based parallel programming library targeting efficient streaming on multi-core architectures. The experimental results demonstrate the efficiency of the DPI framework proposed, proving the feasibility to perform 10Gbit DPI analysis using modern commodity hardware.
引用
收藏
页码:92 / 99
页数:8
相关论文
共 50 条
  • [1] Deep Packet Inspection: Algorithms, Hardware, and Applications
    Lin, Ying-Dar
    Lin, Po-Ching
    Prasanna, Viktor K.
    Chao, H. Jonathan
    Lockwood, John W.
    [J]. IEEE JOURNAL ON SELECTED AREAS IN COMMUNICATIONS, 2014, 32 (10) : 1781 - 1783
  • [2] Deep Packet Inspection Research Based On Hardware Acceleration
    Guo Lei
    Wang Yadi
    Zhu Ke
    [J]. 2012 INTERNATIONAL CONFERENCE ON INDUSTRIAL CONTROL AND ELECTRONICS ENGINEERING (ICICEE), 2012, : 1984 - 1986
  • [3] Hardware acceleration of regular expression repetitions in deep packet inspection
    Cronin, Brendan
    Wang, Xiaojun
    [J]. IET INFORMATION SECURITY, 2013, 7 (04) : 327 - 335
  • [4] Deep packet inspection tools and techniques in commodity platforms: Challenges and trends
    Antonello, Rafael
    Fernandes, Stenio
    Kamienski, Carlos
    Sadok, Djamel
    Kelner, Judith
    Godor, Istvan
    Szabo, Geza
    Westholm, Tord
    [J]. JOURNAL OF NETWORK AND COMPUTER APPLICATIONS, 2012, 35 (06) : 1863 - 1878
  • [5] A Hardware-Based String Matching Using State Transition Compression for Deep Packet Inspection
    Kim, HyunJin
    Lee, Seung-Woo
    [J]. ETRI JOURNAL, 2013, 35 (01) : 154 - 157
  • [6] Using string matching for deep packet inspection
    Lin, Po-Ching
    Lin, Ying-Dar
    Lee, Tsern-Huei
    Lai, Yuan-Cheng
    [J]. COMPUTER, 2008, 41 (04) : 23 - +
  • [7] Deep Packet Inspection Using Quotient Filter
    Al-hisnawi, Mohammad
    Ahmadi, Mahmood
    [J]. IEEE COMMUNICATIONS LETTERS, 2016, 20 (11) : 2217 - 2220
  • [8] A Hardware-Efficient Pattern Matching Architecture Using Process Element Tree for Deep Packet Inspection
    Ahn, Seongyong
    Hong, Hyejeong
    Kim, HyunJin
    Ahn, Jin-Ho
    Baek, Dongmyong
    Kang, Sungho
    [J]. IEICE TRANSACTIONS ON COMMUNICATIONS, 2010, E93B (09) : 2440 - 2442
  • [9] Deep packet inspection using parallel bloom filters
    Dharmapurikar, S
    Krishnamurthy, P
    Sproull, TS
    Lockwood, JW
    [J]. IEEE MICRO, 2004, 24 (01) : 52 - 61
  • [10] Using Deep Packet Inspection in Cyber Traffic Analysis
    Deri, Luca
    Fusco, Francesco
    [J]. PROCEEDINGS OF THE 2021 IEEE INTERNATIONAL CONFERENCE ON CYBER SECURITY AND RESILIENCE (IEEE CSR), 2021, : 89 - 94