What is Deep Packet Inspection (DPI)?
Deep Packet Inspection (DPI), also called Complete Packet Inspection or Information Extraction or IX, is an advanced form of computer network packet filtering that works at the application layer of the ISO-OSI (Open Systems Interconnection) model. It examines the packet header (data section) and inspects protocol non-compliance, virus and spams, intrusions and packet destination address along with route.
How is Deep Packet Inspection (DPI) Used?
Deep Packet Inspection (DPI) is used extensively by both enterprises and network/internet service providers for the following.
- Buffer Overflow Attack Detection
- Data Leak Prevention (DLP)
- Lawful Interception
- Policy Definition and Enforcement
- Targeted Advertising
- Quality of Service (QoS)
- Tiered Services Offer
- Copyright Enforcement
- Net Neutrality Prevention
How does Deep Packet Inspection work?
- Deep Packet Inspection (DPI) works following a deuce of steps, listed below.
- DPI combines signature matching technology with data analysis algorithm to determine communication stream impact.
DPI examines packet header, footer, source and destination of incoming packets and searches for illegal statements and predefined criteria and reassembles the packet.
Why is Deep Packet Inspection Needed?
Deep Packet Inspection (DPI) is needed to:
- Find, Identify, Classify, Reroute and Block Packets with particular data/code payloads
- Allocate available resources to smoothen traffic flow
- Ensure throttled data transfer preventing P2P (Peer-to-Peer) abuse
- Ameliorate network performance and throughput
- Impose online privacy through sender-receiver identification
- Enable advanced network management, user service, internet data mining, internet censorship and eavesdropping
What are the limitations of Deep Packet Inspection?
Although highly useful, Deep Packet Inspection (DPI) has a couple of limitations. Some of them are:
- Creates new vulnerabilities
- Facilitates buffer overflow and denial of service (DOS) attacks
- Escalates the complexity of firewalls and other IT security software
- Reduces processing speed due to overload
How is ALTEN Calsoft Labs using Deep Packet Inspection?
ALTEN Calsoft Labs works hand-in-hand with network equipment manufacturers (NEMs) in building L4-L7 networking products with features like Deep Packet Inspection for Packet Forwarding Decisioning, L2-L7 Intelligence Conception and more.