{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,3]],"date-time":"2026-04-03T23:14:44Z","timestamp":1775258084723,"version":"3.50.1"},"publisher-location":"Cham","reference-count":22,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030019495","type":"print"},{"value":"9783030019501","type":"electronic"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-030-01950-1_5","type":"book-chapter","created":{"date-parts":[[2018,10,25]],"date-time":"2018-10-25T19:16:51Z","timestamp":1540495011000},"page":"75-91","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Deep Packet Inspection with Delayed Signature Matching in Network Auditing"],"prefix":"10.1007","author":[{"given":"Yingpei","family":"Zeng","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shanqing","family":"Guo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2018,10,26]]},"reference":[{"key":"5_CR1","doi-asserted-by":"crossref","unstructured":"Deri, L., Martinelli, M., Bujlow, T., Cardigliano, A.: nDPI: open-source high-speed deep packet inspection. In: Proceedings of International Wireless Communications and Mobile Computing Conference (IWCMC), pp. 617\u2013622. Nicosia (2014)","DOI":"10.1109\/IWCMC.2014.6906427"},{"key":"5_CR2","unstructured":"nDPI. https:\/\/github.com\/ntop\/nDPI. Accessed 5 June 2018"},{"key":"5_CR3","unstructured":"L7-filter. http:\/\/l7-filter.sourceforge.net. Accessed 5 June 2018"},{"key":"5_CR4","unstructured":"Hyperscan. http:\/\/intel.github.io\/hyperscan. Accessed 5 June 2018"},{"key":"5_CR5","unstructured":"Bober, A.: Introduction to Layer 7-filter. https:\/\/mum.mikrotik.com\/\/presentations\/PL10\/l7_interprojekt.pdf"},{"key":"5_CR6","doi-asserted-by":"publisher","first-page":"75","DOI":"10.1016\/j.comnet.2014.11.001","volume":"76","author":"T Bujlow","year":"2015","unstructured":"Bujlow, T., Carela-Espaol, V., Barlet-Ros, P.: Independent comparison of popular DPI tools for traffic classification. Comput. Netw. 76, 75\u201389 (2015)","journal-title":"Comput. Netw."},{"key":"5_CR7","doi-asserted-by":"crossref","unstructured":"Anat, B., Shimrit, T., Yotam, H.: Hay, D.: Leveraging traffic repetitions for high-speed deep packet inspection. In: Proceedings of INFOCOM, pp. 2578\u20132586 (2015)","DOI":"10.1109\/INFOCOM.2015.7218648"},{"issue":"5","key":"5_CR8","doi-asserted-by":"publisher","first-page":"213","DOI":"10.1145\/2829988.2787502","volume":"45","author":"Justine Sherry","year":"2015","unstructured":"Sherry, J., Lan, C., Ada Popa, R., Ratnasamy, S.: BlindBox: deep packet inspection over encrypted traffic. In: Proceedings of SIGCOMM, pp. 213\u2013226 (2015)","journal-title":"ACM SIGCOMM Computer Communication Review"},{"key":"5_CR9","doi-asserted-by":"crossref","unstructured":"Yuan, X., Wang, X., Lin, J., Wang, C.: Privacy-preserving deep packet inspection in outsourced middleboxes. In: Proceedings of INFOCOM 2016, pp. 1\u20139. San Francisco (2016)","DOI":"10.1109\/INFOCOM.2016.7524526"},{"key":"5_CR10","doi-asserted-by":"crossref","unstructured":"Schiff, L., Schmid, S.: PRI: privacy preserving inspection of encrypted network traffic. In: Proceedings of IEEE Security and Privacy Workshops (SPW), pp. 296\u2013303. San Jose 2016)","DOI":"10.1109\/SPW.2016.34"},{"key":"5_CR11","doi-asserted-by":"crossref","unstructured":"Kumar, S., Dharmapurikar, S., Yu, F., Crowley, P., Turner, J.: Algorithms to accelerate multiple regular expressions matching for deep packet inspection. In: Proceedings of SIGCOMM, pp. 339\u2013350, Pisa (2006)","DOI":"10.1145\/1151659.1159952"},{"issue":"1","key":"5_CR12","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1109\/MM.2004.1268997","volume":"24","author":"S Dharmapurikar","year":"2004","unstructured":"Dharmapurikar, S., Krishnamurthy, P., Sproull, T.S., Lockwood, J.W.: Deep packet inspection using parallel bloom filters. IEEE Micro 24(1), 52\u201361 (2004)","journal-title":"IEEE Micro"},{"key":"5_CR13","unstructured":"Paxson, V.: Bro: a system for detecting network intruders in real-time. In: Proceedings of the 7th Conference on USENIX Security Symposium (1998)"},{"key":"5_CR14","doi-asserted-by":"crossref","unstructured":"Durumeric, Z., et al.: The security impact of HTTPS interception. In: Proceedings of NDSS (2017)","DOI":"10.14722\/ndss.2017.23456"},{"key":"5_CR15","doi-asserted-by":"crossref","unstructured":"Backurs, A., Indyk, P.: Which regular expression patterns are hard to match? In: Proceedings of FOCS (2016)","DOI":"10.1109\/FOCS.2016.56"},{"key":"5_CR16","unstructured":"Poddar, R., Lan, C., Ada Popa, R., Ratnasamy, S.: SafeBricks: shielding network functions in the cloud. In: Proceedings of NSDI (2018)"},{"key":"5_CR17","doi-asserted-by":"crossref","unstructured":"Dyer, K., Coull, S., Ristenpart, T., Shrimpton, T.: Protocol misidentification made easy with format-transforming encryption. In: Proceedings of CCS (2013)","DOI":"10.1145\/2508859.2516657"},{"key":"5_CR18","doi-asserted-by":"crossref","unstructured":"Wang, L., Dyer, K.P., Akella, A., Ristenpart, T., Shrimpton, T.: Seeing through network-protocol obfuscation. In: Proceedings of CCS (2015)","DOI":"10.1145\/2810103.2813715"},{"key":"5_CR19","doi-asserted-by":"crossref","unstructured":"Dierks, T., Rescorla, E.: The transport layer security (TLS) protocol version 1.2, RFC 5246, August 2008","DOI":"10.17487\/rfc5246"},{"key":"5_CR20","doi-asserted-by":"crossref","unstructured":"Eastlake, D.: Transport layer security (TLS) extensions: extension definitions, RFC 6066, January 2011","DOI":"10.17487\/rfc6066"},{"key":"5_CR21","doi-asserted-by":"crossref","unstructured":"Myers, J., Rose, M.: Post office protocol - version 3, RFC 1939, May 1996","DOI":"10.17487\/rfc1939"},{"key":"5_CR22","unstructured":"Porter, T.: The perils of deep packet inspection, security focus (2005)"}],"container-title":["Lecture Notes in Computer Science","Information and Communications Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-01950-1_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,3]],"date-time":"2026-04-03T21:51:43Z","timestamp":1775253103000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-01950-1_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783030019495","9783030019501"],"references-count":22,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-01950-1_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018]]},"assertion":[{"value":"26 October 2018","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Information and Communications Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Lille","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 October 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31 October 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icics2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/conference.imt-lille-douai.fr\/icics2018\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}