当前位置: X-MOL 学术ACM Comput. Surv. › 论文详情
Our official English website, www.x-mol.net, welcomes your feedback! (Note: you will need to create a separate account there.)
A Survey on Encrypted Network Traffic Analysis Applications, Techniques, and Countermeasures
ACM Computing Surveys ( IF 16.6 ) Pub Date : 2021-07-13 , DOI: 10.1145/3457904
Eva Papadogiannaki 1 , Sotiris Ioannidis 2
Affiliation  

The adoption of network traffic encryption is continually growing. Popular applications use encryption protocols to secure communications and protect the privacy of users. In addition, a large portion of malware is spread through the network traffic taking advantage of encryption protocols to hide its presence and activity. Entering into the era of completely encrypted communications over the Internet, we must rapidly start reviewing the state-of-the-art in the wide domain of network traffic analysis and inspection, to conclude if traditional traffic processing systems will be able to seamlessly adapt to the upcoming full adoption of network encryption. In this survey, we examine the literature that deals with network traffic analysis and inspection after the ascent of encryption in communication channels. We notice that the research community has already started proposing solutions on how to perform inspection even when the network traffic is encrypted and we demonstrate and review these works. In addition, we present the techniques and methods that these works use and their limitations. Finally, we examine the countermeasures that have been proposed in the literature in order to circumvent traffic analysis techniques that aim to harm user privacy.

中文翻译:

加密网络流量分析应用、技术与对策综述

网络流量加密的采用不断增长。流行的应用程序使用加密协议来保护通信并保护用户的隐私。此外,大部分恶意软件通过网络流量传播,利用加密协议隐藏其存在和活动。进入互联网完全加密通信时代,我们必须迅速开始审视网络流量分析和检测的广泛领域的最新技术,以确定传统流量处理系统是否能够无缝适应即将全面采用网络加密。在本次调查中,我们研究了在通信通道加密兴起后处理网络流量分析和检查的文献。我们注意到,研究界已经开始提出即使网络流量被加密也如何执行检查的解决方案,我们演示和审查了这些工作。此外,我们介绍了这些作品使用的技术和方法及其局限性。最后,我们研究了文献中提出的对策,以规避旨在损害用户隐私的流量分析技术。
更新日期:2021-07-13
down
wechat
bug