NDLI: QCF for deep packet inspection

Content Provider	IET Digital Library
Author	hisnawi, Mohammad Al Ahmadi, Mahmood
Abstract	Deep packet inspection (DPI) acts as a tool to control and classify incoming network traffic depending on users,content, applications and becomes a very important aspect of every network today. Instead of utilising only incoming packet header information, Internet service providers utilise DPI for security purposes, flow management, and routing. The high-performance challenges that face DPI techniques to manage line-speed packet processing with restricted available memory are the increasing traffic volumes and link rates. Bloom (BF) and quotient (QF) filters are effective randomised data structures for performing approximate membership queries. They have been employed in many networking applications including DPI. Nevertheless, they consume more calculations which degrade the system performance. Consequently, in this paper, the authors propose a new variant of membership query data structure, called quotient-based Cuckoo filter (QCF), that reflects a merging process between QF and CF to minimise the calculation overhead and employing it in a DPI system. QCF employs only two hash functions and consumes less calculation overhead than BF, QF, and CF. The implementation results show that using QCF as an identification tool in a DPI system result in a time improvement up to 77% over CF and up to 98% over BF and QF.
Starting Page	346
Ending Page	352
Page Count	7
ISSN	20474954
Volume Number	7
e-ISSN	20474962
Issue Number	Issue 5, Sep (2018)
Alternate Webpage(s)	https://digital-library.theiet.org/content/journals/iet-net/7/5
Alternate Webpage(s)	https://digital-library.theiet.org/content/journals/10.1049/iet-net.2017.0037
Journal	IET Networks
Publisher Date	2018-03-21
Access Restriction	Open
Rights Holder	© The Institution of Engineering and Technology
Subject Keyword	Approximate Membership Queries Computer Communication Computer Network Security Content Application Data Security Data Structures Deep Packet Inspection DPI System Effective Randomised Data Structures Face DPI Technique File Organisation Flow Management High-performance Challenges Incoming Network Traffic Incoming Packet Header Information Increasing Traffic Volumes Internet Internet Service Providers Line-speed Packet Processing Membership Query Data Structure Networking Application QCF QF Query Processing Quotient-based Cuckoo Filter Restricted Available Memory Security Purposes System Performance Telecommunication Network Routing Telecommunication Security
Content Type	Text
Resource Type	Article
Subject	Control and Optimization Management Science and Operations Research Computer Networks and Communications

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Parallel multiple pattern matching schemes based on cuckoo filter for deep packet inspection on graphics processing units

Virus control

Firewall Policy Queries

Hybrid mechanism towards network packet early acceptance and rejection for unified threat management

DPI based forensic analysis of network traffic using grid infrastructure

Hardware-assisted estimation of entropy norm for high-speed network traffic

Cybersecurity and Network Forensics: Analysis of Malicious Traffic towards a Honeynet with Deep Packet Inspection

Traffic Management Becoming High-Priority Problem

Efficient Processing of Multi-connection Compressed Web Traffic

QCF for deep packet inspection

Similar Documents

Parallel multiple pattern matching schemes based on cuckoo filter for deep packet inspection on graphics processing units

Virus control

Firewall Policy Queries

Hybrid mechanism towards network packet early acceptance and rejection for unified threat management

DPI based forensic analysis of network traffic using grid infrastructure

Hardware-assisted estimation of entropy norm for high-speed network traffic

Cybersecurity and Network Forensics: Analysis of Malicious Traffic towards a Honeynet with Deep Packet Inspection

Traffic Management Becoming High-Priority Problem

Efficient Processing of Multi-connection Compressed Web Traffic

QCF for deep packet inspection