5th International ICST Conference on Performance Evaluation Methodologies and Tools

Research Article

Automatic Protocol Signature Generation Framework for Deep Packet Inspection

Download594 downloads
  • @INPROCEEDINGS{10.4108/icst.valuetools.2011.245606,
        author={G\^{e}za Szab\^{o} and Zolt\^{a}n Tur\^{a}nyi and L\^{a}szl\^{o} Toka and S\^{a}ndor Moln\^{a}r and Alysson Santos},
        title={Automatic Protocol Signature Generation Framework for Deep Packet Inspection},
        proceedings={5th International ICST Conference on Performance Evaluation Methodologies and Tools},
        publisher={ICST},
        proceedings_a={VALUETOOLS},
        year={2012},
        month={6},
        keywords={deep packet inspection automatic protocol signature generation motif finding},
        doi={10.4108/icst.valuetools.2011.245606}
    }
    
  • Géza Szabó
    Zoltán Turányi
    László Toka
    Sándor Molnár
    Alysson Santos
    Year: 2012
    Automatic Protocol Signature Generation Framework for Deep Packet Inspection
    VALUETOOLS
    ICST
    DOI: 10.4108/icst.valuetools.2011.245606
Géza Szabó1,*, Zoltán Turányi1, László Toka2, Sándor Molnár2, Alysson Santos3
  • 1: TrafficLab, Ericsson Research, Hungary
  • 2: High Speed Networks Laboratory, Department of Telecommunications and Mediainformatics, Budapest University of Technology and Economics
  • 3: Networking and Telecommunications Research Group, Universidade Federal de Pernambuco
*Contact email: geza.szabo@ericsson.com

Abstract

We present an automatic application protocol signature generating framework for Deep Packet Inspection (DPI) techniques with performance evaluation. We propose to utilize algorithms from the field of bioinformatics. We also present preprocessing methods to accelerate our system. Moreover, we developed several postprocessing techniques to refine the accuracy of the results. Finally, we propose a DPI system, based on approximate string matching, and find it a viable, novel alternative for the refinement of exact string matching algorithm's results.