A common belief in the scientific community is that traffic classifiers based on deep packet inspection (DPI) are far more expensive in terms of computational complexity compared to statistical classifiers. In this paper we counter this notion by defining accurate models for a deep packet inspection classifier and a statistical one based on support vector machines, and by evaluating their actual processing costs through experimental analysis. The results suggest that, contrary to the common belief, a DPI classifier and an SVM-based one can have comparable computational costs. Although much work is left to prove that our results apply in more general cases, this preliminary analysis is a first indication of how DPI classifiers might not be as computationally complex, compared to other approaches, as we previously thought.

An Experimental Evaluation of the Computational Cost of a DPI Traffic Classifier / Cascarano, Niccolo'; Este, A; Gringoli, F; Risso, FULVIO GIOVANNI OTTAVIO; Salgarelli, L.. - STAMPA. - (2009), pp. 1-8. ((Intervento presentato al convegno IEEE Globecom 2009 - Next-Generation Networking and Internet Symposium tenutosi a Honolulu (HI) nel November 30, 2009 - December 4, 2009 [10.1109/GLOCOM.2009.5425469].

An Experimental Evaluation of the Computational Cost of a DPI Traffic Classifier

CASCARANO, NICCOLO';RISSO, FULVIO GIOVANNI OTTAVIO;
2009

Abstract

A common belief in the scientific community is that traffic classifiers based on deep packet inspection (DPI) are far more expensive in terms of computational complexity compared to statistical classifiers. In this paper we counter this notion by defining accurate models for a deep packet inspection classifier and a statistical one based on support vector machines, and by evaluating their actual processing costs through experimental analysis. The results suggest that, contrary to the common belief, a DPI classifier and an SVM-based one can have comparable computational costs. Although much work is left to prove that our results apply in more general cases, this preliminary analysis is a first indication of how DPI classifiers might not be as computationally complex, compared to other approaches, as we previously thought.
9781424441488
File in questo prodotto:
File Dimensione Formato  
09Globecom-DPIcompl.pdf

accesso aperto

Tipologia: 1. Preprint / submitted version [pre- review]
Licenza: PUBBLICO - Tutti i diritti riservati
Dimensione 612.34 kB
Formato Adobe PDF
612.34 kB Adobe PDF Visualizza/Apri
09Globecom-DPIcompl-published.pdf

non disponibili

Tipologia: 2. Post-print / Author's Accepted Manuscript
Licenza: Non Pubblico - Accesso privato/ristretto
Dimensione 463.81 kB
Formato Adobe PDF
463.81 kB Adobe PDF   Visualizza/Apri   Richiedi una copia
Pubblicazioni consigliate

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11583/2263343
 Attenzione

Attenzione! I dati visualizzati non sono stati sottoposti a validazione da parte dell'ateneo