Deep packet inspection (DPI) is an asset for modern network security solutions. The technology addresses a wide range of network security challenges including both malware and non-malware threats. At the RSA Conference in San Francisco, Rohde & Schwarz demonstrates the highest performing DPI software on the market, enabling cybersecurity vendors to strengthen their solutions and hold off hackers.
ipoque, a Rohde & Schwarz company, a leading supplier of deep packet inspection (DPI) software, provides an easy-to-integrate, scalable, and customisable turnkey DPI solution to ensure network security and protect organisations against cyberattacks. For network security vendors, the R&S PACE 2 DPI engine from Rohde & Schwarz delivers comprehensive network visibility. Incorporating DPI adds IP traffic analytics capabilities to network security devices and provides granular information on applications and protocols for proper classification.
R&S PACE 2 classifies thousands of applications and protocols, provides content and metadata extraction regardless of whether the protocols use advanced obfuscation, port hopping techniques or encryption, and offers metrics and heuristics from IP traffic in real time. When applied to network security solutions, developers can achieve reliable application visibility that allows for facilitating the secure delivery of critical applications and services.
For example, companies like Saint Security use the R&S PACE 2 DPI software in its network-based advanced malware response solution MNX to identify, analyse, judge and block malicious activity. The R&S PACE 2 engine serves as the key enabling feature to get a deep understanding of the observed network traffic. R&S PACE 2 extracts file content and metadata to identify potentially dangerous executables caused by advanced persistent threats (APTs). By embedding the DPI engine, Saint Security unlocks the full potential of Artificial Intelligence-based (AI) analysis methodologies to fingerprint sophisticated cyber-attacks.
“Today’s cybersecurity threats can no longer be detected with traditional methods. With the huge growth in IP network traffic using web protocols, security vendors need to be able to identify the application to distinguish between traffic. As a result, DPI technology is a must for IP network security solutions,” says Alexander Müller, product manager for DPI at Rohde & Schwarz. “The R&S PACE 2 is an easy-to-deploy and effective solution to fight modern cybersecurity threats,” he continues.
The DPI software by Rohde & Schwarz will be presented at this year’s RSA Conference in San Francisco at booth 3927/16, April 16–20, 2018.