8. Stateful and deep packet inspection (SPI and DPI)
The filtering function of firewalls continues to evolve, with the dual objective of filtering flows ever more finely and quickly. The most recent developments have resulted in packet inspection mechanisms, which can be divided into two main families with very different objectives:
stateful packet inspection is used within organizations to filter IP flows according to IP and TCP headers in the same way as a stateful packet filter (§ 5
The Ultimate Scientific and Technical Reference
This article is included in
Security of information systems
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
Stateful and deep packet inspection (SPI and DPI)
IDS and IPS to detect and react to intrusions
Bibliography
Bibliography
- (1) - ANSSI - Recommandations pour la définition d'une politique de filtrage réseau d'un pare-feu. - mars 2013 https://www.ssi.gouv.fr/uploads/IMG/pdf/NP_Politique_pare_feu_NoteTech.pdf ...
Software tools
Squid http://www.squid-cache.org
netfilter http://www.netfilter.org
SNORT http://www.snort.org
Websites
ANSSI, CSPN certified products https://www.ssi.gouv.fr/entreprise/produits-certifies/produits-certifies-cspn/
ANSSI, Common criteria certified products https://www.ssi.gouv.fr/entreprise/produits-certifies/cc/produits-certifies-cc/
...Standards and norms
- IETF, LEECH (M.), GANIS (M.), LEE (Y.), KURIS (R.), KOBLAS (D.), JONES (L.). – SOCKS Protocol Version 5. http://ietf.org/rfc/rfc1928.txt?number=1928 - rfc 1928 - 03-96
Regulations
Law no. 2009-1311 of October 28, 2009 on the criminal protection of literary and artistic property on the Internet, JORF no. 0251 of Oct. 29, 2009 https://www.legifrance.gouv.fr/affichTexte.do?cidTexte=JORFTEXT000021208046&categorieLien=id
Law no. 2015-912...
The Ultimate Scientific and Technical Reference
