Deep Packet Inspection (DPI) is the most time and resource consuming procedure in contemporary security tools such as Network Intrusion Detection/Prevention System (NIDS/IPS), Web Application Firewall (WAF), or Content Filtering Proxy. DPI consists of inspecting both the packet header and payload and alerting when signatures of malicious software appear in the traffic. These signatures are identified through pattern matching algorithms.
['Anat Bremler-Barr', 'Shimrit Tzur David', 'David Hay', 'Yaron Koral']
Decompression-free inspection: DPI for shared dictionary compression over HTTP