e-space
Manchester Metropolitan University's Research Repository

    Rethinking Deep Packet Inspection design and deployment in the era of SDN and NFV

    Mustapha, Hanan, Djahel, Soufiene ORCID logoORCID: https://orcid.org/0000-0002-1286-7037, Perry, Philip and Zhang, Zonghua (2022) Rethinking Deep Packet Inspection design and deployment in the era of SDN and NFV. In: The 2021 IEEE International Conference on Smart City, 20 December 2021 - 22 December 2021, Haikou, Hainan, China.

    [img]
    Preview
    Accepted Version
    Available under License In Copyright.

    Download (262kB) | Preview

    Abstract

    With the advent of Software-Defined Networking (SDN) and Network Functions Virtualization (NFV), the design and deployment of DPI (Deep Packet Inspection) must be reconsidered. The programmability, global visibility and centralized control of SDN, as well as the NFV enabled lightweight service creation and migration, have potential to empower the capability of DPI tools. On the other hand, dynamic environments make the deployment of DPI challenging. Although it has been validated that some security functions like firewall, and Intrusion Detection System (IDS) can be implemented in SDN controllers or NFV, it remains unclear whether or not DPI can be done in the similar way considering its sophisticated interactions with the network traffic packets, especially for the stateful protocols and encrypted traffic. In other words, the design and deployment of DPI in an SDN and NFV architecture would not be as straightforward. Therefore, this paper aims to shed the light on the challenges facing DPI design and deployment in the context of SDN and NFV and propose a solution to overcome them.

    Impact and Reach

    Statistics

    Activity Overview
    6 month trend
    514Downloads
    6 month trend
    81Hits

    Additional statistics for this dataset are available via IRStats2.

    Altmetric

    Repository staff only

    Edit record Edit record