How to Build DPI Products? (Part XIX - Automatic Protocol Signature Generation)

Research paper by Géza Szabó (pictured), Zoltán Turányi - TrafficLab, Ericsson Research, László Toka, Sándor Molnár - High Speed Networks Lab, Dept. of Telecomm. and Media informatics, Budapest Univ. of Technology and Economics (all from Hungary) and Alysson Santos, Networking and Telecomm Research Group, Universidade Federal de Pernambuco, Recife, Brazil.

ABSTRACT

We present an automatic application protocol signature generating framework for Deep Packet Inspection (DPI) techniques with performance evaluation. We propose to utilize algorithms from the field of bioinformatics. We also present pre-processing methods to accelerate our system. Moreover, we developed several post processing techniques to refine the accuracy of the results. Finally, we propose a DPI system, based on approximate string matching, and find it a viable, novel alternative for the refinement of exact string matching algorithm’s results.

See "Automatic Protocol Signature Generation Framework for Deep Packet Inspection" - here.