An Integrative System for Deep Packet Inspection and Network Anomaly Detection & Defense

In this paper, we proposed a security system which can accomplish several various functions. The primary applications of this system includes: (1) lawful interception for the data of voip, email, instant message and other kinds of data; (2) filtering abnormality data packages; (3) blocking the illegal URL or sites; (4) performing net traffic and flow analysis and user behavior analysis; (5) doing network bandwidth monitoring, DDOS traffic cleaning; (6) SPAM filtering and so on. All the problems we involved are the most concerned by the operators engaged in telecommunication. The system architecture and the function we designed are based on the research of Lawful Interception (ETSI).