Decompression-free inspection: DPI for shared dictionary compression over HTTP

Anat Bremler-Barr; Shimrit Tzur David; David Hay; Yaron Koral

doi:10.1109/INFCOM.2012.6195576

Decompression-free inspection: DPI for shared dictionary compression over HTTP

Anat Bremler-Barr^*, Shimrit Tzur David, David Hay, Yaron Koral

^*Corresponding author for this work

The Rachel and Selim Benin School of Engineering and Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

15 Scopus citations

Abstract

Deep Packet Inspection (DPI) is the most time and resource consuming procedure in contemporary security tools such as Network Intrusion Detection/Prevention System (NIDS/IPS), Web Application Firewall (WAF), or Content Filtering Proxy. DPI consists of inspecting both the packet header and payload and alerting when signatures of malicious software appear in the traffic. These signatures are identified through pattern matching algorithms.

Original language	American English
Title of host publication	2012 Proceedings IEEE INFOCOM, INFOCOM 2012
Pages	1987-1995
Number of pages	9
DOIs	https://doi.org/10.1109/INFCOM.2012.6195576
State	Published - 2012
Event	IEEE Conference on Computer Communications, INFOCOM 2012 - Orlando, FL, United States Duration: 25 Mar 2012 → 30 Mar 2012

Publication series

Name	Proceedings - IEEE INFOCOM
ISSN (Print)	0743-166X

Conference

Conference	IEEE Conference on Computer Communications, INFOCOM 2012
Country/Territory	United States
City	Orlando, FL
Period	25/03/12 → 30/03/12

Access to Document

10.1109/INFCOM.2012.6195576

Cite this

@inproceedings{317c2eca4edf4e29b041e689bad071d1,

title = "Decompression-free inspection: DPI for shared dictionary compression over HTTP",

abstract = "Deep Packet Inspection (DPI) is the most time and resource consuming procedure in contemporary security tools such as Network Intrusion Detection/Prevention System (NIDS/IPS), Web Application Firewall (WAF), or Content Filtering Proxy. DPI consists of inspecting both the packet header and payload and alerting when signatures of malicious software appear in the traffic. These signatures are identified through pattern matching algorithms.",

author = "Anat Bremler-Barr and David, {Shimrit Tzur} and David Hay and Yaron Koral",

year = "2012",

doi = "10.1109/INFCOM.2012.6195576",

language = "American English",

isbn = "9781467307758",

series = "Proceedings - IEEE INFOCOM",

pages = "1987--1995",

booktitle = "2012 Proceedings IEEE INFOCOM, INFOCOM 2012",

note = "IEEE Conference on Computer Communications, INFOCOM 2012 ; Conference date: 25-03-2012 Through 30-03-2012",

}

Bremler-Barr, A, David, ST, Hay, D & Koral, Y 2012, Decompression-free inspection: DPI for shared dictionary compression over HTTP. in 2012 Proceedings IEEE INFOCOM, INFOCOM 2012., 6195576, Proceedings - IEEE INFOCOM, pp. 1987-1995, IEEE Conference on Computer Communications, INFOCOM 2012, Orlando, FL, United States, 25/03/12. https://doi.org/10.1109/INFCOM.2012.6195576

TY - GEN

T1 - Decompression-free inspection

T2 - IEEE Conference on Computer Communications, INFOCOM 2012

AU - Bremler-Barr, Anat

AU - David, Shimrit Tzur

AU - Hay, David

AU - Koral, Yaron

PY - 2012

Y1 - 2012

N2 - Deep Packet Inspection (DPI) is the most time and resource consuming procedure in contemporary security tools such as Network Intrusion Detection/Prevention System (NIDS/IPS), Web Application Firewall (WAF), or Content Filtering Proxy. DPI consists of inspecting both the packet header and payload and alerting when signatures of malicious software appear in the traffic. These signatures are identified through pattern matching algorithms.

AB - Deep Packet Inspection (DPI) is the most time and resource consuming procedure in contemporary security tools such as Network Intrusion Detection/Prevention System (NIDS/IPS), Web Application Firewall (WAF), or Content Filtering Proxy. DPI consists of inspecting both the packet header and payload and alerting when signatures of malicious software appear in the traffic. These signatures are identified through pattern matching algorithms.

UR - http://www.scopus.com/inward/record.url?scp=84861619764&partnerID=8YFLogxK

U2 - 10.1109/INFCOM.2012.6195576

DO - 10.1109/INFCOM.2012.6195576

M3 - Conference contribution

AN - SCOPUS:84861619764

SN - 9781467307758

T3 - Proceedings - IEEE INFOCOM

SP - 1987

EP - 1995

BT - 2012 Proceedings IEEE INFOCOM, INFOCOM 2012

Y2 - 25 March 2012 through 30 March 2012

ER -

Decompression-free inspection: DPI for shared dictionary compression over HTTP

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this