关键词: 深包检测技术, 隐私, 应用层协议识别

Abstract: The conventional deep packet inspection technologies usually need to inspect complete payloads of the network packets, and this will bring hidden dangers to the users privacy. Privacy aware deep packet inspection (PaDPI) can protect users privacy while getting higher accuracy of identification. Firstly, this paper studies several privacy levels that deep packet inspection involves, and classifies the privacy of packet payload into different levels according to the depth in payloads. Secondly, this paper proposes several schemes to truncate the payloads of network packets according to the privacy levels. Thirdly, this paper evaluates 12 widely used application protocols with those truncated payloads through PaDPI for application protocol identification. The results show that privacy aware deep packet inspection can gain above 80% accuracy on truncated payloads, and can limit the leakage of users privacy strictly.

Key words: deep packet inspection, privacy, application protocol identification