TASHKENT UNIVERSITY OF INFORMATION TECHNOLOGIES Lesson №18 Telecommunication software design for analyzing and control packets on the networks by using DPI-technology

INTRODUCTION Wireless and fixed network broadband service providers face the challenge of increasing return on investment in the face of increasing infrastructure costs to keep up with unprecedented data demand by subscribers while opportunities for increasing revenues remain elusive. Service providers are faced with unprecedented demand for more and higher speed bandwidth in the face of new applications, increased video use, and subscriber growth. Service providers need an awareness of the applications that use IP in order to provide the key roles of security and fairness and DPI is the cornerstone in enabling those through informed decisions.

Topicality of the subject Within increasing number of Internet users, different problems are going up on the networks. The main problems on the communication networks are quality of service, network security and traffic management on the today’s point. The decision of these problems is connected with deep packet inspection technology, which analyses data packets in “depth”. Also, security of communication systems defines with DPI. Using DPI aplications allow security services, like control, blocking unwanted accesses, removing malicious packets, distinguish viruses and other services for avoiding from threads to service providers and network users. In detail, network providers can protect and control their network with DPI. Developing and implementing DPI security solutions in Uzbekistan improve the national infrastructure of information and communication society. After realizing Electron-government in Uzbekistan DPI takes main role in control and management information resources and supports reliable and secure communication. Because of reasons defined above now DPI systems are actual issue in the global telecommunication market. Researchers are working to development new methods to improve the performance of deep packet inspection applications. Therefore, this work is devoted to development of security solution for IP-based packet networks by using DPI.

The range of Packet Inspection by DPI

Deep Packet Inspection implementation

Packet inspection model and algorithm

Deep Packet Inspection software architecture

Deep Packet Inspection software in Windows OS

Deep Packet Inspection software in Windows OS Connections and object status window

Reports window of DPI software

Protocol inspection results

Threats of unregistrated users to system

The performance of software

Comparison of DPI vs non-DPI system performances

Results of testing system Results present, attempts to connect to system and threats to system increase depends on the time, effective performance of system goes down because of unregistrated attempts to connect. Testing results shows that software performance remains around 50% - 60% after a half hour. Testing results show, Linux DPI filter application works better then Windows application. The performance of Linux DPI application is higher and packet inspection, filtering processes are faster in local machine.

Conclusion In research on this thesis, I used deep packet inspection techniques, algorithms and requirements. DPI requirements specify the packet inspection function on the entire packet content rather than just the header. To keep up with high speed packet processing in existing networks, I proposed and used deep packet inspection schemes that are, optimized for new technologies such as Static Pattern Content Matching, Regular Expression Pattern Matching and multi- core processors. Algorithms, I used in that work both on packet headers and packet payload. The developed DPI system is in a cohesive and flexible architecture that can perform high rate packet scanning and inspecting against thousands of sophisticated patterns. So, consistent with this thesis, the tasks have been solved: analyzed of DPI solutions for networks security in ip-based communication networks; analyzed of deep packet inspection methods and algorithms; developed algorithm and program for DPI security system in different operation systems; explained experimental analyses taken from real network with DPI software.

Conclusion Nowadays DPI systems able to deal with high packet incoming rate, can handle such load of traffic with increase in the classification completeness. Additionally, such modifications empower DPI systems, in order to provide ISPs with a wider view of what is passing through their network, aggregating a great amount of traffic information. In this dissertation, I explained high speed packet processing algorithms for new services such as network intrusion detection, high speed firewalls and developed own DPI security software for server. These DPI applications can reconfigure on demand and may add thousands of known protocol patterns for rapid scanning and analyzing data packets.

THANK YOU FOR YOUR ATTENTION!