Parallelizing Deep Packet Inspection on GPU

Ramesh, Meera; Jeon, Hyeran

doi:10.1109/bigdataservice.2018.00044

Cited by 4 publications

(2 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the study numbered [14], the matching performance of the hashing-based Rabin-Karp (RK) [12] algorithm on IDSs is evaluated. There are also DPI applications in which the matching performance of the parallel application of this algorithm on the GPU is assessed [15,16]. Each thread carries out the algorithm procedure for all patterns, starting from the position corresponding to the thread index in the multi-pattern-matching version of the RK algorithm performed on the GPU.…”

Section: Hashing-based Techniquementioning

confidence: 99%

See 1 more Smart Citation

Accelerating Pattern Matching Using a Novel Multi-Pattern-Matching Algorithm on GPU

Çelebi

Yavanoğlu

2023

Applied Sciences

View full text Add to dashboard Cite

Nowadays, almost all network traffic is encrypted. Attackers hide themselves using this traffic and attack over encrypted channels. Inspections performed only on packet headers and metadata are insufficient for detecting cyberattacks over encrypted channels. Therefore, it is important to analyze packet contents in applications that require control over payloads, such as content filtering, intrusion detection systems (IDSs), data loss prevention systems (DLPs), and fraud detection. This technology, known as deep packet inspection (DPI), provides full control over the communication between two end stations by keenly analyzing the network traffic. This study proposes a multi-pattern-matching algorithm that reduces the memory space and time required in the DPI pattern matching compared to traditional automaton-based algorithms with its ability to process more than one packet payload character at once. The pattern-matching process in the DPI system created to evaluate the performance of the proposed algorithm (PA) is conducted on the graphics processing unit (GPU), which accelerates the processing of network packets with its parallel computing capability. This study compares the PA with the Aho-Corasick (AC) and Wu–Manber (WM) algorithms, which are widely used in the pattern-matching process, considering the memory space required and throughput obtained. Algorithm tables created with a dataset containing 500 patterns use 425 and 688 times less memory space than those of the AC and WM algorithms, respectively. In the pattern-matching process using these tables, the PA is 3.5 and 1.5 times more efficient than the AC and WM algorithms, respectively.

show abstract

Section: Hashing-based Techniquementioning

confidence: 99%

“…An increase in the number of patterns to be examined requires additional hash calculations for the RK algorithm, and the matching speed decreases in large pattern datasets. Thus, RK is not an efficient algorithm for multi-pattern matching [16].…”

Section: Hashing-based Techniquementioning

confidence: 99%

Accelerating Pattern Matching Using a Novel Multi-Pattern-Matching Algorithm on GPU

Çelebi

Yavanoğlu

2023

Applied Sciences

View full text Add to dashboard Cite

show abstract

KPN-based parallelization of Wu–Manber algorithm on multi-core machines

2019

View full text Add to dashboard Cite

Modern ağ trafiği analizi için derin paket incelemesi hakkında kapsamlı bir çalışma: sorunlar ve zorluklar

Çelebi

ÖZBİLEN

Yavanoğlu

2022

NÖHÜ Müh. Bilim. Derg.

View full text Add to dashboard Cite

Deep Packet Inspection (DPI) provides full visibility into network traffic by performing detailed analysis on both packet header and packet payload. Accordingly, DPI has critical importance as it can be used in applications i.e network security or government surveillance. In this paper, we provide an extensive survey on DPI. Different from the previous studies, we try to efficiently integrate DPI techniques into network analysis mechanisms by identifying performance-limiting parameters in the analysis of modern network traffic. Analysis of the network traffic model with complex behaviors is carried out with powerful hybrid systems by combining more than one technique. Therefore, DPI methods are studied together with other techniques used in the analysis of network traffic. Security applications of DPI on Internet of Things (IoT) and Software-Defined Networking (SDN) architectures are discussed and Intrusion Detection Systems (IDS) mechanisms, in which the DPI is applied as a component of the hybrid system, are examined. In addition, methods that perform inspection of encrypted network traffic are emphasized and these methods are evaluated from the point of security, performance and functionality. Future research issues are also discussed taking into account the implementation challenges for all DPI processes.

show abstract

Parallelizing Deep Packet Inspection on GPU

Cited by 4 publications

References 14 publications

Accelerating Pattern Matching Using a Novel Multi-Pattern-Matching Algorithm on GPU

Accelerating Pattern Matching Using a Novel Multi-Pattern-Matching Algorithm on GPU

KPN-based parallelization of Wu–Manber algorithm on multi-core machines

Modern ağ trafiği analizi için derin paket incelemesi hakkında kapsamlı bir çalışma: sorunlar ve zorluklar

Contact Info

Product

Resources

About