A Survey on Deep Packet Inspection for Intrusion Detection Systems

TL;DR

This survey reviews deep packet inspection techniques used in intrusion detection systems, discussing their implementations, challenges, algorithms, and comparing various systems to highlight their strengths and limitations.

Contribution

It provides a comprehensive overview of deep packet inspection methods, research challenges, and a comparative analysis of existing systems in intrusion detection.

Findings

Identifies key implementation techniques for deep packet inspection.

Highlights research challenges in scalability and accuracy.

Provides comparative insights into different intrusion detection systems.

Abstract

Deep packet inspection is widely recognized as a powerful way which is used for intrusion detection systems for inspecting, deterring and deflecting malicious attacks over the network. Fundamentally, almost intrusion detection systems have the ability to search through packets and identify contents that match with known attacks. In this paper, we survey the deep packet inspection implementations techniques, research challenges and algorithms. Finally, we provide a comparison between the different applied systems.