VELAN, Petr, Milan ČERMÁK, Pavel ČELEDA and Martin DRAŠAR. A Survey of Methods for Encrypted Traffic Classification and Analysis. International Journal of Network Management. Sons, Ltd., vol. 25, No 5, p. 355-374. ISSN 1055-7148. 2015.
Other formats:   BibTeX LaTeX RIS
Basic information
Original name A Survey of Methods for Encrypted Traffic Classification and Analysis
Name in Czech Přehled metod pro klasifikaci a analýzu šifrovaného síťového provozu
Authors VELAN, Petr (203 Czech Republic, guarantor, belonging to the institution), Milan ČERMÁK (203 Czech Republic, belonging to the institution), Pavel ČELEDA (203 Czech Republic, belonging to the institution) and Martin DRAŠAR (203 Czech Republic, belonging to the institution).
Edition International Journal of Network Management, Sons, Ltd. 2015, 1055-7148.
Other information
Original language English
Type of outcome Article in a journal
Field of Study Informatics
Country of publisher United States of America
Confidentiality degree is not subject to a state or trade secret
WWW URL URL
RIV identification code RIV/00216224:14610/15:00080523
Organization Ústav výpočetní techniky – Repository – Repository
UT WoS 000360842100007
Keywords (in Czech) šifrovaný provoz; monitorování; sítě; klasifikace provozu; analýza provozu; strojové učení; šifrovací protokoly
Keywords in English encrypted traffic; monitoring; network; traffic classification; traffic analysis; machine learning; encryption protocols
Links VF20142015037, research and development project.
Changed by Changed by: RNDr. Daniel Jakubík, učo 139797. Changed: 2/9/2020 04:35.
Abstract
With the widespread use of encrypted data transport network traffic encryption is becoming a standard nowadays. This presents a challenge for traffic measurement, especially for analysis and anomaly detection methods which are dependent on the type of network traffic. In this paper, we survey existing approaches for classification and analysis of encrypted traffic. First, we describe the most widespread encryption protocols used throughout the Internet. We show that the initiation of an encrypted connection and the protocol structure give away a lot of information for encrypted traffic classification and analysis. Then, we survey payload and feature-based classification methods for encrypted traffic and categorize them using an established taxonomy. The advantage of some of described classification methods is the ability to recognize the encrypted application protocol in addition to the encryption protocol. Finally, we make a comprehensive comparison of the surveyed feature-based classification methods and present their weaknesses and strengths.
Abstract (in Czech)
Šifrování síťového provozu se v dnešní době stalo standardem. To přináší vysoké nároky na monitorování síťového provozu, zejména pak na analýzu provozu a detekci anomálií, které jsou závislé na znalosti typu síťového provozu. V tomto článku přinášíme přehled existujících způsobů klasifikace a analýzy šifrovaného provozu. Nejprve popisujeme nejrozšířenější šifrovací protokoly, a ukazujeme, jakým způsobem lze získat informace pro analýzu a klasifikaci šifrovaného provozu. Následně se zabýváme klasifikačními metodami založenými na obsahu paketů a vlastnostech síťového provozu. Tyto metody klasifikujeme pomocí zavedené taxonomie. Výhodou některých popsaných klasifikačních metod je schopnost rozeznat nejen šifrovací protokol, ale také šifrovaný aplikační protokol. Na závěr porovnáváme silné a slabé stránky všech popsaných klasifikačních metod.
Type Name Uploaded/Created by Uploaded/Created Rights
a-survey-of-methods-for-encrypted-traffic-classification-and-analysis.pdf Licence Creative Commons  File version 2/9/2020

Properties

Name
a-survey-of-methods-for-encrypted-traffic-classification-and-analysis.pdf
Address within IS
https://repozitar.cz/auth/repo/18946/898861/
Address for the users outside IS
https://repozitar.cz/repo/18946/898861/
Address within Manager
https://repozitar.cz/auth/repo/18946/898861/?info
Address within Manager for the users outside IS
https://repozitar.cz/repo/18946/898861/?info
Uploaded/Created
Wed 2/9/2020 04:35

Rights

Right to read
  • anyone on the Internet
Right to upload
 
Right to administer:
  • a concrete person Mgr. Lucie Vařechová, uco 106253
  • a concrete person RNDr. Daniel Jakubík, uco 139797
  • a concrete person Mgr. Jolana Surýnková, uco 220973
Attributes
 
... Licence Creative Commons  File version 22/9/2015

Properties

Name
...
Address within IS
https://repozitar.cz/auth/repo/18946/244670/
Address for the users outside IS
https://repozitar.cz/repo/18946/244670/
Address within Manager
https://repozitar.cz/auth/repo/18946/244670/?info
Address within Manager for the users outside IS
https://repozitar.cz/repo/18946/244670/?info
Uploaded/Created
Tue 22/9/2015 00:50

Rights

Right to read
  • anyone on the Internet
Right to upload
 
Right to administer:
  • a concrete person Mgr. Bc. Růžena Zemanová, uco 134451
  • a concrete person RNDr. Daniel Jakubík, uco 139797
Attributes
 
Print
Add to clipboard Displayed: 16/4/2024 22:01