Privacy preserving deep packet filtering over encrypted traffic in software defined networks
Deep packet filtering (DPF) has been demonstrated as an essential technique for effective fine grained access controls, but it is commonly recognized that the technique may invade the individual privacy of the users. Secure computation can address the tradeoff between privacy and DPF functionality, but the current solutions limit the scalability of the network due to the intensive computation overheads and large connection setup delay, especially for the latest network paradigm, network function virtualisation (NFV) and software defined network (SDN) In this paper, therefore, we propose a privacy preserving deep packet filtering protocol, named DPF ET, that can efficiently perform filtering function over encrypted traffic while diminishing the communication overhead and setup delay for the controller in SDN. DPF ET guarantees the data privacy for users and remains rule privacy for the network owner. The implementation results on an experimental HP SDN/NFV platform demonstrate that the proposed DPF ET outperforms the current approaches by reducing 250 times in the communications overhead and 32 times in the setup delay.
2016 IEEE International Conference on Communications (ICC)