Deep Packet Inspection
What is Deep Packet Inspection?
A network analysis technique that examines the full content of data packets as they pass through a checkpoint to detect threats, filter content, or enforce policies.
Terms that appear alongside deep packet inspection
Each of these is named in at least one of the same controls as deep packet inspection. The number is how many controls name both.
- management system 2 shared controls
- spoofing 2 shared controls
- firewall 2 shared controls
- audit 2 shared controls
- gateway 2 shared controls
Frameworks that govern deep packet inspection
What the standards actually require on deep packet inspection
Requirements naming deep packet inspection across 6 standards, quoted from the control text.
Establish network management and monitoring, with approved policies and procedures, including deep packet inspection, quality of service and port-level security.
awwa-cybersecurity-guidance-for-the-water-sector-american-water-works-association::SC-6 · SC-6 Network management and monitoring with deep packet inspection →The CSOC has a security analytics engine that processes logs in reasonable time, recommends deep-dive options and delivers wire-speed performance with on-the-fly deep packet inspection.
rbi-cybersecurity-framework-for-banks::218 · Para 218: security analytics engine with timely processing and deep packet inspection →Use deep packet inspection through AWS Network Firewall, Gateway Load Balancer with third-party appliances or service mesh to inspect and filter traffic for threats.
SEC05-BP03 · Implement inspection-based protection →Technical measures such as deep packet inspection and black-holing give defence in depth for detecting and responding promptly to network attacks that show as anomalous ingress or egress traffic or as DDoS.
ffiec-cybersecurity-assessment-tool-cat::D5.DR.Re.A.3 · D5.DR.Re.A.3 Response and Mitigation (Advanced 3) →Security Planes per X.805 Clause 7.4: Each Security Plane stands for one kind of network activity that the Security Dimensions protect, applied throughout all 3 Security Layers.
X805-Planes-Management-Control-EndUser-OAM-Signalling-Network-Element-Subscriber-Data · ITU-T X.805 Security Planes - Management Plane + Control Plane + End-User Plane + OAM Operations-Administration-Maintenance + Signalling + Routing + Network Element Activity + Subscriber Data Flows + Cross-Layer Application →Use deep packet inspection or protocol-aware filtering for industrial protocols (Modbus, DNP3, OPC, EtherNet/IP, PROFINET) to enforce allowed function codes and detect anomalies.
OT-NET-2 · Industrial Protocol Filtering and Inspection →Questions people ask about deep packet inspection
What is Deep Packet Inspection?
Why is Deep Packet Inspection important for compliance?
Which compliance frameworks address Deep Packet Inspection?
Where can I learn more about Deep Packet Inspection?
See how Deep Packet Inspection applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.