Defensing Confidentiality During Complete Packet Inspection On A Middlebox

Abstract

In Internet to encrypt traffic, HTTPS provides secure and private data communication between clients and servers. Network operators often deploy middleboxes to perform deep packet inspection (DPI) to detect attacks using techniques ranging from simple keyword matching to more advanced machine learning and data mining analysis. But this approach cannot protect users' private information from a service provider who deploys middleboxes. SPABox, a middlebox-based system that supports both keyword-based and data analysis-based DPI functions over encrypted traffic. SPABox preserves using a novel protocol with a limited connection setup overhead. In this paper to further improve the performance, we are working on the network performance requirements.