Scholarlink

Identifying from an Internet flow the services to which it connects is valuable for a variety of purposes, such as enabling zero-rating services that exclude certain services from charging, or controlling priorities within network elements in the event of an unexpected major disaster. For flows encrypted with Transport Layer Security (TLS), a method to identify services from the Server Name Indication (SNI) occurrence based on Deep Packet Inspection (DPI) has been proposed. In addition, it has been shown that the method can achieve high identification accuracy for TLS 1.2 flows. In this paper, we evaluate the identification accuracy of the method for TLS 1.3 flows and show that it can also achieve high identification accuracy for TLS 1.3 flows.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Performance of Service Identification of TLS 1.3 Flows Based on SNI Analysis

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • Ryo Asaoka,
  • Akihiro Nakao,
  • Masato Oguchi,
  • Saneyasu Yamaguchi

摘要

Identifying from an Internet flow the services to which it connects is valuable for a variety of purposes, such as enabling zero-rating services that exclude certain services from charging, or controlling priorities within network elements in the event of an unexpected major disaster. For flows encrypted with Transport Layer Security (TLS), a method to identify services from the Server Name Indication (SNI) occurrence based on Deep Packet Inspection (DPI) has been proposed. In addition, it has been shown that the method can achieve high identification accuracy for TLS 1.2 flows. In this paper, we evaluate the identification accuracy of the method for TLS 1.3 flows and show that it can also achieve high identification accuracy for TLS 1.3 flows.