跳到主要內容

簡易檢索 / 詳目顯示

研究生: 黃彥愷
Yen-Kia Huang
論文名稱: 在TLS交握過程中使用SNI辨識影音串流平台服務
Identifying Public Video Streaming data based on SNI in TLS handshaking
指導教授: 王尉任
Wei-Jen Wang
梁德容
De-Ron Liang
口試委員:
學位類別: 碩士
Master
系所名稱: 資訊電機學院 - 資訊工程學系
Department of Computer Science & Information Engineering
論文出版年: 2022
畢業學年度: 110
語文別: 中文
論文頁數: 44
中文關鍵詞: 影音串流平台分析與辨識網路安全
外文關鍵詞: OpenAppID, snort
相關次數: 點閱:13下載:0
分享至:
查詢本校圖書館目錄 查詢臺灣博碩士論文知識加值系統 勘誤回報
  • 本論文參考客戶端與各影音傳輸平台的CDN之間的連接,並且考慮各影音傳輸平台的CDN傳輸架構,提出利用TCP連接的SNI 辨識出影音傳輸平台的影音流量,根據cisco VNI指出,這些影音傳輸平台在網路總流量中占很大一部分,辨識出影音流量,可以幫助網路管理者管理網路流量,可以幫助網路管理者在特定時間封鎖這些平台使網路流量有更好的負載平衡,或是可以使這些影音流量通過,讓網路管理者可以專注於找出惡意流量。
    本研究提出辨識常使用的影音串流平台:Netflix、YouTube、愛奇藝(iQiyi)、HBO:GO的方法,針對real-time的資料記錄下來分析,且達到高度準確率。希望可以藉由此分析方法,幫助網路管理者過濾、阻擋、分析公司內部的網路流量管理及平衡網路負載,以達成最佳網路資源使用率、降低網路流量成本,且可幫助網路管理員降低分析網路流量的複雜度。


    This paper considers the connection between the client and the CDN of video streaming provider platform, and the CDN transmission architecture of each video streaming provider, and proposes to identify video streaming traffic by using the SNI of the TCP connection. According to cisco VNI, these video streaming platforms account for a large part of the total network traffic. Identifying these video streaming traffic can help network managers manage network traffic. It can help network managers block these platforms at specific times to balance loading
    of network traffic, or being able to pass these video streaming traffic through, allows network managers to focus on finding malicious traffic.
    This study proposes a method to identify commonly used video streaming platforms, like: Netflix, YouTube, iQiyi, HBO:GO, record and analyze real-time data, and achieve high accuracy. It is hoped that this analysis method can help network managers to filter, block, and analyze network traffic and balance network loading within the company, so as to achieve optimal network resource utilization, reduce network traffic costs, and help Network managers reduce the complexity of analyzing network traffic.

    摘要 i Abstract ii 目錄 iii 表目錄 iv 圖目錄 v 一、緒論 1 1-1 研究背景 1 1-2 研究動機與目的 2 1-3 論文架構 2 二、相關研究與討論 3 三、背景知識 4 3-1 TLS概述 4 3-2 伺服器名稱指示 (Server Name Indication ,SNI) 4 3-3 內容分發網路(Content Delivery Network ,CDN) 5 3-4 snort 7 3-5 snort rule 9 3-6 OpenAppID 10 3-6-1 OpenAppID概述 10 3-6-2 OpenAppID 架構解析 11 3-6-3 OpenAppID設計架構 13 3-7 session 定義 13 四、系統設計 14 4-1 Netflix影音串流平台架構 17 4-2 YouTube 影音串流平台架構 19 4-3 愛奇藝影音串流平台架構 20 4-4 proposed method 21 五、實驗結果 22 5-1辨識Netflix 23 5-2 辨識YouTube 25 5-3 辨識愛奇藝 27 5-4 辨識HBO:GO 29 六、結論與未來研究方向 31 參考資料 32

    [1] Cisco Visual Networking Index Predicts Global Annual IP Traffic to Exceed Three Zettabytes by 2021. 2017; Available from: https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2017/m06/cisco-visual-networking-index-predicts-global-annual-ip-traffic-to-exceed-three-zettabytes-by-2021.html.
    [2] Schwartz, S., Sandvine's 2022 'Global Internet Phenomenon Report' Reveals Explosion in Heavy App Usage and App Complexity with Video Everywhere. 2022.
    [3] Nielsen Company. Playback Time: Which Consumer Attitudes Will Shape the Streaming Wars? 2020; Available from: https://www.nielsen.com/us/en/insights/article/2020/playback-time-which-consumer-attitudes-will-shape-the-streaming-wars/.
    [4] Roesch, M., snort3 user manual.
    [5] Service Name and Transport Protocol Port Number Registry. Available from: http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml.
    [6] Moore, A.W., Papagiannaki, K. , Toward the Accurate Identification of Network Applications. 2005.
    [7] Rao, A., Legout, A., Lim, Y. S., Towsley, D., Barakat, C., & Dabbous, W, Network characteristics of video streaming traffic. 2011.
    [8] Torres, R., et al., Dissecting Video Server Selection Strategies in the YouTube CDN, in 2011 31st International Conference on Distributed Computing Systems. 2011. p. 248-257.
    [9] Andrew Reed, M.K., Identifying HTTPS-Protected Netflix Videos in Real-Time. 2017.
    [10] James F. Kurose, K.W.R., Multimedia Networking, in Computer Networking A Top-Down Approach 6th Edition. 2013.
    [11] N. V. Patel, N.M.P.a.C.K., OpenAppID - application identification framework next generation of firewalls. IEEE, 2016.

    QR CODE
    :::