In this paper we focus on the process of deep packet inspection of compressed web traffic. The major limiting factor in this process imposed by the compression, is the high memory requirements of 32 KB per connection. This leads to the requirements of hundreds of megabytes to gigabytes of main memory on a multi-connection setting. We introduce new algorithms and techniques that drastically reduce this space requirement for such bump-in-the-wire devices like security and other content based networking tools. Our proposed scheme improves both space and time performance by almost 80% and over 40% respectively, thus making real-time compressed traffic inspection a viable option for networking devices.
DEEPNESS Lab 2022 © all rights reserved
@article{AFEK2012810,
title = {Space efficient deep packet inspection of compressed web traffic},
journal = {Computer Communications},
volume = {35},
number = {7},
pages = {810-819},
year = {2012},
issn = {0140-3664},
doi = {https://doi.org/10.1016/j.comcom.2012.01.017},
url = {https://www.sciencedirect.com/science/article/pii/S0140366412000278},
author = {Yehuda Afek and Anat Bremler-Barr and Yaron Koral},
keywords = {Pattern matching, Compressed http, Network security, Deep packet inspection}
}