Dynamic Protocol Sequence Optimization in Deep Packet Inspection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional Deep Packet Inspection (DPI) methods experience low protocol match performance due to a fixed characteristic library order, which does not adapt to changing network conditions and message distributions.

Innovation Solution

A method and device that calculate identification probabilities and performance indexes of protocol characteristic information to determine an optimal sequence for DPI, allowing for dynamic adjustment of characteristic order based on statistical strategies and resource consumption, thereby improving protocol match performance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If a fixed order of protocol characteristic information is used in DPI, then device complexity is reduced, but protocol match performance deteriorates

Engineering Contradiction:
Improvecharacteristic library structureVSAvoidprotocol match performance
Core Design Contradiction:
Device complexityVSProductivity

Solution Approach 1:

The patent implements dynamic adjustment of the characteristic information sequence based on identification probabilities calculated from actual message data. The system transitions from a static fixed order to a dynamic adaptive order that changes according to network conditions and message distributions, thereby improving match performance without significantly increasing device complexity

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system changes the parameter of characteristic information ordering from a fixed state to a variable state based on identification probabilities. By calculating and adjusting the sequence parameters dynamically according to actual message patterns, the system optimizes match performance while maintaining manageable complexity through automated parameter adjustment

Inventive Principle:
Principle #35Parameter changes

2Loss of time

If protocol characteristic information is matched in a fixed sequence, then match time is reduced through simplicity, but match performance deteriorates due to inability to adapt to changing network conditions

Engineering Contradiction:
Improvematch timeVSAvoidadaptability to network conditions
Core Design Contradiction:
Loss of timeVSAdaptability or versatility

Solution Approach 1:

The system calculates identification probabilities based on actual DPI identification results and uses this feedback to dynamically adjust the characteristic information sequence. This feedback mechanism enables the system to adapt to changing network conditions and message distributions, improving both match performance and time efficiency by prioritizing more effective characteristics

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system performs preliminary calculation of identification probabilities and preliminary sorting of characteristic information before actual message matching. This preliminary action prepares the optimal sequence in advance based on statistical analysis, reducing match time during actual operation while maintaining adaptability to network conditions

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8825884B2Method and device for protocol identification
Publication Date: 2014.09.02 HUAWEI TECH CO LTD
  • US8825884B2 patent drawing
  • US8825884B2 patent drawing
  • US8825884B2 patent drawing

AI summary

A protocol identification method and a protocol identification device are provided. The protocol identification method includes acquiring a performance index of protocol characteristic information according to characteristic conditions of the protocol characteristic information; calculating identification probabilities of the protocol characteristic information employed by DPI under a preset statistical strategy according to a DPI identification result; determining an optimal sequence of all protocol characteristic information in a DPI identification library according to the performance index and the identification probabilities of the protocol characteristic information; and performing protocol identification on a received message according to the optimal sequence. The optimal sequence for protocol identification is determined according to the identification probabilities, the protocol characteristic information with a high match success probability may be matched first, and the protocol characteristic information with a high match failure probability may be matched later, which thereby improves the protocol match performance.