Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV

Hanan Mustapha; Soufiene Djahel; Philip Perry; Zonghua Zhang

doi:10.1109/HPCC-DSS-SmartCity-DependSys53884.2021.00224

Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV

Hanan Mustapha, Soufiene Djahel, Philip Perry, Zonghua Zhang

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

With the advent of Software-Defined Networking (SDN) and Network Functions Virtualization (NFV), the design and deployment of DPI (Deep Packet Inspection) must be reconsidered. The programmability, global visibility and centralized control of SDN, as well as the NFV enabled lightweight service creation and migration, have potential to empower the capability of DPI tools. On the other hand, dynamic environments make the deployment of DPI challenging. Although it has been validated that some security functions like firewall, and Intrusion Detection System (IDS) can be implemented in SDN controllers or NFV, it remains unclear whether or not DPI can be done in the similar way considering its sophisticated interactions with the network traffic packets, especially for the stateful protocols and encrypted traffic. In other words, the design and deployment of DPI in an SDN and NFV architecture would not be as straightforward. Therefore, this paper aims to shed the light on the challenges facing DPI design and deployment in the context of SDN and NFV and propose a solution to overcome them.

Original language	English
Title of host publication	2021 IEEE 23rd International Conference on High Performance Computing and Communications, 7th International Conference on Data Science and Systems, 19th International Conference on Smart City and 7th International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	1505-1514
Number of pages	10
ISBN (Electronic)	9781665494571
ISBN (Print)	9781665494588
DOIs	https://doi.org/10.1109/HPCC-DSS-SmartCity-DependSys53884.2021.00224
Publication status	Published - 30 May 2022
Externally published	Yes
Event	23rd IEEE International Conference on High Performance Computing and Communications, 7th IEEE International Conference on Data Science and Systems, 19th IEEE International Conference on Smart City and 7th IEEE International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021 - Haikou, Hainan, China Duration: 20 Dec 2021 → 22 Dec 2021

Conference

Conference	23rd IEEE International Conference on High Performance Computing and Communications, 7th IEEE International Conference on Data Science and Systems, 19th IEEE International Conference on Smart City and 7th IEEE International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021
Country/Territory	China
City	Haikou, Hainan
Period	20/12/21 → 22/12/21

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

10.1109/HPCC-DSS-SmartCity-DependSys53884.2021.00224Licence: Unspecified

Cite this

Mustapha, H., Djahel, S., Perry, P., & Zhang, Z. (2022). Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV. In 2021 IEEE 23rd International Conference on High Performance Computing and Communications, 7th International Conference on Data Science and Systems, 19th International Conference on Smart City and 7th International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021 (pp. 1505-1514). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/HPCC-DSS-SmartCity-DependSys53884.2021.00224

Mustapha, Hanan ; Djahel, Soufiene ; Perry, Philip et al. / Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV. 2021 IEEE 23rd International Conference on High Performance Computing and Communications, 7th International Conference on Data Science and Systems, 19th International Conference on Smart City and 7th International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021. Institute of Electrical and Electronics Engineers Inc., 2022. pp. 1505-1514

@inproceedings{7e0e08fa02a840608b036661a7fd73c7,

title = "Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV",

abstract = "With the advent of Software-Defined Networking (SDN) and Network Functions Virtualization (NFV), the design and deployment of DPI (Deep Packet Inspection) must be reconsidered. The programmability, global visibility and centralized control of SDN, as well as the NFV enabled lightweight service creation and migration, have potential to empower the capability of DPI tools. On the other hand, dynamic environments make the deployment of DPI challenging. Although it has been validated that some security functions like firewall, and Intrusion Detection System (IDS) can be implemented in SDN controllers or NFV, it remains unclear whether or not DPI can be done in the similar way considering its sophisticated interactions with the network traffic packets, especially for the stateful protocols and encrypted traffic. In other words, the design and deployment of DPI in an SDN and NFV architecture would not be as straightforward. Therefore, this paper aims to shed the light on the challenges facing DPI design and deployment in the context of SDN and NFV and propose a solution to overcome them.",

keywords = "Deep Packet Inspection, NFV, SDN",

author = "Hanan Mustapha and Soufiene Djahel and Philip Perry and Zonghua Zhang",

note = "Funding Information: This research has been supported in part by the BT Ireland Innovation Centre (BTIIC) project, funded by BT and Invest Northern Ireland. Publisher Copyright: {\textcopyright} 2021 IEEE.; 23rd IEEE International Conference on High Performance Computing and Communications, 7th IEEE International Conference on Data Science and Systems, 19th IEEE International Conference on Smart City and 7th IEEE International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021 ; Conference date: 20-12-2021 Through 22-12-2021",

year = "2022",

month = may,

day = "30",

doi = "10.1109/HPCC-DSS-SmartCity-DependSys53884.2021.00224",

language = "English",

isbn = "9781665494588",

pages = "1505--1514",

booktitle = "2021 IEEE 23rd International Conference on High Performance Computing and Communications, 7th International Conference on Data Science and Systems, 19th International Conference on Smart City and 7th International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

address = "United States",

}

Mustapha, H, Djahel, S, Perry, P & Zhang, Z 2022, Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV. in 2021 IEEE 23rd International Conference on High Performance Computing and Communications, 7th International Conference on Data Science and Systems, 19th International Conference on Smart City and 7th International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021. Institute of Electrical and Electronics Engineers Inc., pp. 1505-1514, 23rd IEEE International Conference on High Performance Computing and Communications, 7th IEEE International Conference on Data Science and Systems, 19th IEEE International Conference on Smart City and 7th IEEE International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021, Haikou, Hainan, China, 20/12/21. https://doi.org/10.1109/HPCC-DSS-SmartCity-DependSys53884.2021.00224

Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV. / Mustapha, Hanan; Djahel, Soufiene; Perry, Philip et al.

2021 IEEE 23rd International Conference on High Performance Computing and Communications, 7th International Conference on Data Science and Systems, 19th International Conference on Smart City and 7th International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021. Institute of Electrical and Electronics Engineers Inc., 2022. p. 1505-1514.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV

AU - Mustapha, Hanan

AU - Djahel, Soufiene

AU - Perry, Philip

AU - Zhang, Zonghua

PY - 2022/5/30

Y1 - 2022/5/30

N2 - With the advent of Software-Defined Networking (SDN) and Network Functions Virtualization (NFV), the design and deployment of DPI (Deep Packet Inspection) must be reconsidered. The programmability, global visibility and centralized control of SDN, as well as the NFV enabled lightweight service creation and migration, have potential to empower the capability of DPI tools. On the other hand, dynamic environments make the deployment of DPI challenging. Although it has been validated that some security functions like firewall, and Intrusion Detection System (IDS) can be implemented in SDN controllers or NFV, it remains unclear whether or not DPI can be done in the similar way considering its sophisticated interactions with the network traffic packets, especially for the stateful protocols and encrypted traffic. In other words, the design and deployment of DPI in an SDN and NFV architecture would not be as straightforward. Therefore, this paper aims to shed the light on the challenges facing DPI design and deployment in the context of SDN and NFV and propose a solution to overcome them.

AB - With the advent of Software-Defined Networking (SDN) and Network Functions Virtualization (NFV), the design and deployment of DPI (Deep Packet Inspection) must be reconsidered. The programmability, global visibility and centralized control of SDN, as well as the NFV enabled lightweight service creation and migration, have potential to empower the capability of DPI tools. On the other hand, dynamic environments make the deployment of DPI challenging. Although it has been validated that some security functions like firewall, and Intrusion Detection System (IDS) can be implemented in SDN controllers or NFV, it remains unclear whether or not DPI can be done in the similar way considering its sophisticated interactions with the network traffic packets, especially for the stateful protocols and encrypted traffic. In other words, the design and deployment of DPI in an SDN and NFV architecture would not be as straightforward. Therefore, this paper aims to shed the light on the challenges facing DPI design and deployment in the context of SDN and NFV and propose a solution to overcome them.

KW - Deep Packet Inspection

KW - NFV

KW - SDN

UR - http://www.scopus.com/inward/record.url?scp=85132421112&partnerID=8YFLogxK

U2 - 10.1109/HPCC-DSS-SmartCity-DependSys53884.2021.00224

DO - 10.1109/HPCC-DSS-SmartCity-DependSys53884.2021.00224

M3 - Conference contribution

AN - SCOPUS:85132421112

SN - 9781665494588

SP - 1505

EP - 1514

BT - 2021 IEEE 23rd International Conference on High Performance Computing and Communications, 7th International Conference on Data Science and Systems, 19th International Conference on Smart City and 7th International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 23rd IEEE International Conference on High Performance Computing and Communications, 7th IEEE International Conference on Data Science and Systems, 19th IEEE International Conference on Smart City and 7th IEEE International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021

Y2 - 20 December 2021 through 22 December 2021

ER -

Mustapha H, Djahel S, Perry P, Zhang Z. Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV. In 2021 IEEE 23rd International Conference on High Performance Computing and Communications, 7th International Conference on Data Science and Systems, 19th International Conference on Smart City and 7th International Conference on Dependability in Sensor, Cloud and Big Data Systems and Applications, HPCC-DSS-SmartCity-DependSys 2021. Institute of Electrical and Electronics Engineers Inc. 2022. p. 1505-1514 doi: 10.1109/HPCC-DSS-SmartCity-DependSys53884.2021.00224

Rethinking Deep Packet Inspection Design and Deployment in the era of SDN and NFV

Abstract

Conference

UN SDGs

Access to Document

Other files and links

Fingerprint

Cite this