 - Deep packet inspection (DPI) is an advanced method of packet filtering that functions at the Application layer of the OSI (Open Systems Interconnection) reference model. The use of DPI makes it possible to find, identify, classify, reroute or block packets with specific data or code payloads that conventional packet filtering, which examines only packet headers, cannot detect.
Using DPI, communications service providers can allocate available resources to streamline traffic flow. For example, a message tagged as high priority can be routed to its destination ahead of less important or low-priority messages or packets involved in casual Internet browsing. DPI can also be used for throttled data transfer to prevent P2P (peer-to-peer) abuse, improving network performance for most subscribers. The security implications of DPI are widespread because the technology makes it possible to identify the originator or recipient of content containing specific packets, a capability that has sparked concern among advocates of online privacy.
DPI has at least three significant limitations. First, it can create new vulnerabilities as well as protect against existing ones. While effective against buffer overflow attacks, denial of service attacks and certain types of malware, DPI can also be exploited to facilitate attacks in those same categories. Second, DPI adds to the complexity and unwieldy nature of existing firewalls and other security-related software. DPI requires its own periodic updates and revisions to remain optimally effective. Third, DPI can reduce computer speed because it increases the burden on the processor. Despite these limitations, many network administrators have embraced DPI technology in an attempt to cope with a perceived increase in the complexity and widespread nature of Internet-related perils.
Numerous companies, including such major players as Alcatel, Cisco, Ericsson, IBM, Microsoft, Nokia and Symantec have begun to aggressively market DPI technology as components of hardware and software firewalls.
 |
Learn more about Network Security Monitoring and Analysis |
| Integrating NAC with network security tools: Integrating NAC solutions with other network security functions can produce a more complete user identity to strengthen every policy across the network. |
| NagVis -- 'Nagios: System and Network Monitoring, Second Edition,' Chapter 18: Learn to install, configure and create visual NagVis1 maps for your Nagios Web interface with Chapter 18 of "Nagios: System and Network Monitoring, 2nd Ed." |
| Visual Security Analysis -- 'Applied Security Visualization,' Chapter 5: Visual Security Analysis, Chapter 5 of the book 'Applied Security Visualization,' shows different ways of analyzing security data using visual approaches. |
| Network Infrastructure -- Chapter 9 of "Hacking for Dummies": This chapter will help you select tools, scan network hosts, assess security with a network analyzer, and prevent denial-of-service and infrastructure vulnerabilities. |
| Top expert Q&As of 2006: View the top five Q&As from our group of elite experts in 2006. Topics covered include: network admin & mgmt, security, routing and switching, certs, IPv6 and wireless networking. |
| LAST UPDATED: |
01 Nov 2007
|
 |
Do you have something to add to this definition? Let us know.
Send your comments to techterms@whatis.com
|
|
More resources from around the web:
|
|
Show me everything on 
