Wind River Showcases DPI for Network Security at Mobile World Congress
Wind River is working with Sensory Networks to demonstrate DPI security solutions at Mobile World Congress 2012. The demonstration highlights how a DPI enabled operating system can deliver wire-speed content inspection.
The constant flood of new mobile devices combined with the expansion of 4G networks such as long-term evolution (LTE) has created an explosion of data traffic. Additionally, the rate of security attacks continues to rise, making the need to inspect each packet of data increasingly important. As a result, there is a greater need for network equipment to improve performance of packet throughput and handle data more intelligently and with greater security.
DPI functionality is an essential element for network security applications in order to inspect data streams and packets for malicious content. As malware threats become more sophisticated, network equipment must deliver greater inspection granularity of incoming data, without sacrificing performance. A software-based DPI approach can provide a cost-effective and scalable solution with the flexibility to evolve with the changing demands of the network security market. Unlike traditional firewalls and intrusion detection systems that inspect only packet headers, DPI makes it possible to inspect every header and payload of every packet, providing the basis for a strong security application.
The demonstration integrates Sensory Networks HyperScan with carrier grade Wind River Linux optimized for multi-core hardware and the Intel® Data Plane Development Kit (DPDK). Software and processor hardware were integrated into an off-the-shelf multi-gigabit system provided by Emerson Network Power. By building in HyperScan into Wind River Linux, the demonstration is an example of a single integrated, cost-effective software solution for scanning data content at line rate in network security equipment. The DPI software can accelerate packet performance for functions such as intrusion prevention, antiX, firewall, content filtering, application identification and Unified Threat Management (UTM).
“The rapid expansion of mobile and other connected devices is generating larger and more varied types of data packets that must be prioritized and accelerated in order to deliver a high level of service for a quality user experience. Along with growing data traffic, security attacks and malware also continue to climb,” said Mike Langlois, vice president and general manager of networking and telecommunications at Wind River. Through DPI technology with Sensory Networks, we are demonstrating how to address the critical need for network security applications to perform more complex content processing and handle more data traffic at a faster rate or risk becoming a bottleneck in the network.”
“It is vital for equipment designers to be able to build-in greater security and intelligence while maintaining high levels of network performance,” said Sab Gosal, chief executive officer for Sensory Networks. “By using HyperScan DPI software technology, networking and security equipment vendors can significantly improve the content scanning performance, intelligence and scalability of their products. The combination of Sensory Networks HyperScan and Wind River Linux, optimized for leading multi-core CPU architectures, demonstrates how robust, carrier grade operating systems can deliver wire-speed content inspection and security.”
Sensory Networks HyperScan is high-speed pattern-matching software intended for integration into networking and security products. Supporting a wide range of applications including IPS/IDS, firewall, DPI and content filtering, the software engine can deliver optimized performance while scanning against databases comprising of hundreds of thousands of signatures. Designed for both single-core and multi-core processors, HyperScan can scale from under 1Gbps up to 160Gbps, depending on the number of cores used. HyperScan streamlines the engineering and design process by enabling equipment vendors to perform a one-time integration into a system release, allowing it to be used for an entire product line as well as upgrade legacy products.
Wind River is showcasing its latest networking technologies at the Wind River booth in Hall 2, booth 2A17 at Mobile World Congress 2012. Separately, Android technologies will be on display at the Wind River booth as well.