Efficient Processing of Multi-Connection Compressed Web Traffic

Yehuda Afek, Anat Bremler-Barr, Yaron Koral
Computer Communication,
Deep Packet Inspection (DPI)


In this paper we focus on the process of deep packet inspection of compressed web traffic. The major limiting factor in this process imposed by the compression, is the high memory requirements of 32 KB per connection. This leads to the requirements of hundreds of megabytes to gigabytes of main memory on a multi-connection setting. We introduce new algorithms and techniques that drastically reduce this space requirement for such bump-in-the-wire devices like security and other content based networking tools. Our proposed scheme improves both space and time performance by almost 80% and over 40% respectively, thus making real-time compressed traffic inspection a viable option for networking devices.

    title = {Space efficient deep packet inspection of compressed web traffic},
    journal = {Computer Communications},
    volume = {35},
    number = {7},
    pages = {810-819},
    year = {2012},
    issn = {0140-3664},
    doi = {https://doi.org/10.1016/j.comcom.2012.01.017},
    url = {https://www.sciencedirect.com/science/article/pii/S0140366412000278},
    author = {Yehuda Afek and Anat Bremler-Barr and Yaron Koral},
    keywords = {Pattern matching, Compressed http, Network security, Deep packet inspection}