Restricting access to network resources through data packet inspection (DPI)

This paper examines deep packet inspection (DPI) technology, that is a modern method of network traffic analysis which is capable of working with data link packet levels (within OSI model). The paper describes basic operating principles of DPI, it’s usage for improvement of data network service quality and it’s abilities to monitor threats within the network and effectively block them. The emphasis is on DPI’s general advantages and disadvantages and it’s capabilities to work with encrypted traffic.

References

[1] A Brief Overview of DPI — Deep Packet Inspection Technology. URL: https://habr.com/ru/articles/111054/ (accessed 15 October 2025).

[2] Goldstein B.S., Elagin V.S., Zarubin A.A., Fitsov V.V. Methods of Packet Inspection and Traffic Analysis. Deep Packet Inspection Technology. St. Petersburg, M.A. Bonch-Bruevich SPbSUT Publ., 2018, 60 p. (In Russ.).

[3] Kosheparov D.Ya. Software Implementation of a Deep Packet Inspection System. Bulletin of Science and Education, 2020, No. 12 (90), Part 1, pp. 21–25. (In Russ.).

[4] Voronin V.V. Analysis of Deep Packet Inspection Technology. Bulletin of the Voronezh Institute of High Technologies, 2018, No. 12 (3). (In Russ.). URL: https://www.vestnikvivt.ru/ru/journal/pdf?id=864 (accessed 15 October 2025).

[5] Elagin V.S., Onufrienko V.S. Deep Packet Inspection Technology in a Software-Defined Network. Proceedings of Educational Institutions of Communications, 2016, No. 2, pp. 59–63. (In Russ.).

[6] Roebuck K. Deep Packet Inspection (DPI): High-impact Strategies — What You Need to Know: Definitions, Adoptions, Impact, Benefits, Maturity, Vendors. Emereo Publishing, 2011, 183 p.

[7] Romanenko O.A. Deep Packet Inspection as a Tool for Traffic Analysis and Control. Telecommunications: Networks and Technologies, Algebraic Coding and Data Security. Int. Scientific and Technical Seminar: Proc. Minsk, Belarusian State University of Informatics and Radioelectronics, 2018, pp. 90–93. (In Russ.).

[8] Fitsov V.V. On the Implementation of DPI. Vestnik svyazi, 2016, no. 11, pp. 25–28. (In Russ.).

[9] Getman A.I., Evstropov E.F., Markin Yu.V. Real-Time Network Traffic Analysis: A Review of Applied Problems, Approaches, and Solutions. (In Russ.). URL: https://www.ispras.ru/preprints/docs/prep_28_2015.pdf (accessed 15 October 2025).

[10] Mueller M., Kuehn A. Profiling the Profilers: Deep Packet Inspection and Behavioral Advertising in Europe and the United States. SSRN Electronic Journal, 2012. https://doi.org/10.2139/ssrn.2014181