Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV

Hanan Mustapha; Soufiene Djahel; Philip Perry; Zonghua Zhang

doi:10.1109/hpcc-dss-smartcity-dependsys53884.2021.00224

Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV

Hanan Mustapha, Soufiene Djahel, Philip Perry, Zonghua Zhang

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

With the advent of Software-Defined Networking (SDN) and Network Functions Virtualization (NFV), the design and deployment of DPI (Deep Packet Inspection) must be reconsidered. The programmability, global visibility and centralized control of SDN, as well as the NFV enabled lightweight service creation and migration, have potential to empower the capability of DPI tools. On the other hand, dynamic environments make the deployment of DPI challenging. Although it has been validated that some security functions like firewall, and Intrusion Detection System (IDS) can be implemented in SDN controllers or NFV, it remains unclear whether or not DPI can be done in the similar way considering its sophisticated interactions with the network traffic packets, especially for the stateful protocols and encrypted traffic. In other words, the design and deployment of DPI in an SDN and NFV architecture would not be as straightforward. Therefore, this paper aims to shed the light on the challenges facing DPI design and deployment in the context of SDN and NFV and propose a solution to overcome them.

Original language	English
Title of host publication	2021 IEEE 23rd Int Conf on High Performance Computing & Communications; 7th Int Conf on Data Science & Systems; 19th Int Conf on Smart City; 7th Int Conf on Dependability in Sensor, Cloud & Big Data Systems & Application (HPCC/DSS/SmartCity/DependSys)
Publisher	IEEE
ISBN (Electronic)	978-1-6654-9457-1
ISBN (Print)	978-1-6654-9458-8
DOIs	https://doi.org/10.1109/hpcc-dss-smartcity-dependsys53884.2021.00224
Publication status	Published - 30 May 2022
Event	IEEE International Conference on High Performance Computing and Communications (HPCC) - Haikou, Hainan, China Duration: 20 Dec 2021 → 22 Dec 2021 http://10.1109/HPCC/DSS/SmartCity/D53884.2021

Conference

Conference	IEEE International Conference on High Performance Computing and Communications (HPCC)
Abbreviated title	HPCC
Country/Territory	China
City	Hainan
Period	20/12/21 → 22/12/21
Internet address	http://10.1109/HPCC/DSS/SmartCity/D53884.2021

Access to Document

10.1109/hpcc-dss-smartcity-dependsys53884.2021.00224

Cite this

Mustapha, H., Djahel, S., Perry, P., & Zhang, Z. (2022). Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV. In 2021 IEEE 23rd Int Conf on High Performance Computing & Communications; 7th Int Conf on Data Science & Systems; 19th Int Conf on Smart City; 7th Int Conf on Dependability in Sensor, Cloud & Big Data Systems & Application (HPCC/DSS/SmartCity/DependSys) IEEE. https://doi.org/10.1109/hpcc-dss-smartcity-dependsys53884.2021.00224

Mustapha, Hanan ; Djahel, Soufiene ; Perry, Philip ; Zhang, Zonghua. / Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV. 2021 IEEE 23rd Int Conf on High Performance Computing & Communications; 7th Int Conf on Data Science & Systems; 19th Int Conf on Smart City; 7th Int Conf on Dependability in Sensor, Cloud & Big Data Systems & Application (HPCC/DSS/SmartCity/DependSys). IEEE, 2022.

@inproceedings{cf32a7b0cac14dd9acb531d3f20fbe33,

title = "Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV",

abstract = "With the advent of Software-Defined Networking (SDN) and Network Functions Virtualization (NFV), the design and deployment of DPI (Deep Packet Inspection) must be reconsidered. The programmability, global visibility and centralized control of SDN, as well as the NFV enabled lightweight service creation and migration, have potential to empower the capability of DPI tools. On the other hand, dynamic environments make the deployment of DPI challenging. Although it has been validated that some security functions like firewall, and Intrusion Detection System (IDS) can be implemented in SDN controllers or NFV, it remains unclear whether or not DPI can be done in the similar way considering its sophisticated interactions with the network traffic packets, especially for the stateful protocols and encrypted traffic. In other words, the design and deployment of DPI in an SDN and NFV architecture would not be as straightforward. Therefore, this paper aims to shed the light on the challenges facing DPI design and deployment in the context of SDN and NFV and propose a solution to overcome them.",

author = "Hanan Mustapha and Soufiene Djahel and Philip Perry and Zonghua Zhang",

year = "2022",

month = may,

day = "30",

doi = "10.1109/hpcc-dss-smartcity-dependsys53884.2021.00224",

language = "English",

isbn = "978-1-6654-9458-8",

booktitle = "2021 IEEE 23rd Int Conf on High Performance Computing & Communications; 7th Int Conf on Data Science & Systems; 19th Int Conf on Smart City; 7th Int Conf on Dependability in Sensor, Cloud & Big Data Systems & Application (HPCC/DSS/SmartCity/DependSys)",

publisher = "IEEE",

address = "United States",

note = "IEEE International Conference on High Performance Computing and Communications (HPCC), HPCC ; Conference date: 20-12-2021 Through 22-12-2021",

url = "http://10.1109/HPCC/DSS/SmartCity/D53884.2021",

}

Mustapha, H, Djahel, S, Perry, P & Zhang, Z 2022, Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV. in 2021 IEEE 23rd Int Conf on High Performance Computing & Communications; 7th Int Conf on Data Science & Systems; 19th Int Conf on Smart City; 7th Int Conf on Dependability in Sensor, Cloud & Big Data Systems & Application (HPCC/DSS/SmartCity/DependSys). IEEE, IEEE International Conference on High Performance Computing and Communications (HPCC), Hainan, China, 20/12/21. https://doi.org/10.1109/hpcc-dss-smartcity-dependsys53884.2021.00224

Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV. / Mustapha, Hanan; Djahel, Soufiene; Perry, Philip; Zhang, Zonghua.

2021 IEEE 23rd Int Conf on High Performance Computing & Communications; 7th Int Conf on Data Science & Systems; 19th Int Conf on Smart City; 7th Int Conf on Dependability in Sensor, Cloud & Big Data Systems & Application (HPCC/DSS/SmartCity/DependSys). IEEE, 2022.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV

AU - Mustapha, Hanan

AU - Djahel, Soufiene

AU - Perry, Philip

AU - Zhang, Zonghua

PY - 2022/5/30

Y1 - 2022/5/30

N2 - With the advent of Software-Defined Networking (SDN) and Network Functions Virtualization (NFV), the design and deployment of DPI (Deep Packet Inspection) must be reconsidered. The programmability, global visibility and centralized control of SDN, as well as the NFV enabled lightweight service creation and migration, have potential to empower the capability of DPI tools. On the other hand, dynamic environments make the deployment of DPI challenging. Although it has been validated that some security functions like firewall, and Intrusion Detection System (IDS) can be implemented in SDN controllers or NFV, it remains unclear whether or not DPI can be done in the similar way considering its sophisticated interactions with the network traffic packets, especially for the stateful protocols and encrypted traffic. In other words, the design and deployment of DPI in an SDN and NFV architecture would not be as straightforward. Therefore, this paper aims to shed the light on the challenges facing DPI design and deployment in the context of SDN and NFV and propose a solution to overcome them.

AB - With the advent of Software-Defined Networking (SDN) and Network Functions Virtualization (NFV), the design and deployment of DPI (Deep Packet Inspection) must be reconsidered. The programmability, global visibility and centralized control of SDN, as well as the NFV enabled lightweight service creation and migration, have potential to empower the capability of DPI tools. On the other hand, dynamic environments make the deployment of DPI challenging. Although it has been validated that some security functions like firewall, and Intrusion Detection System (IDS) can be implemented in SDN controllers or NFV, it remains unclear whether or not DPI can be done in the similar way considering its sophisticated interactions with the network traffic packets, especially for the stateful protocols and encrypted traffic. In other words, the design and deployment of DPI in an SDN and NFV architecture would not be as straightforward. Therefore, this paper aims to shed the light on the challenges facing DPI design and deployment in the context of SDN and NFV and propose a solution to overcome them.

U2 - 10.1109/hpcc-dss-smartcity-dependsys53884.2021.00224

DO - 10.1109/hpcc-dss-smartcity-dependsys53884.2021.00224

M3 - Conference contribution

SN - 978-1-6654-9458-8

BT - 2021 IEEE 23rd Int Conf on High Performance Computing & Communications; 7th Int Conf on Data Science & Systems; 19th Int Conf on Smart City; 7th Int Conf on Dependability in Sensor, Cloud & Big Data Systems & Application (HPCC/DSS/SmartCity/DependSys)

PB - IEEE

T2 - IEEE International Conference on High Performance Computing and Communications (HPCC)

Y2 - 20 December 2021 through 22 December 2021

ER -

Mustapha H, Djahel S, Perry P, Zhang Z. Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV. In 2021 IEEE 23rd Int Conf on High Performance Computing & Communications; 7th Int Conf on Data Science & Systems; 19th Int Conf on Smart City; 7th Int Conf on Dependability in Sensor, Cloud & Big Data Systems & Application (HPCC/DSS/SmartCity/DependSys). IEEE. 2022 https://doi.org/10.1109/hpcc-dss-smartcity-dependsys53884.2021.00224

Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV

Abstract

Conference

Access to Document

Fingerprint

Cite this