网络加密流量识别研究综述及展望  

Review and perspective on encrypted traffic identification research

作　　者：潘吴斌[1,2] 程光[1,2] 郭晓军[1,2] 黄顺翔 

机构地区：[1]东南大学计算机科学与工程学院,江苏南京210096 [2]东南大学计算机网络和信息集成教育部重点实验室,江苏南京210096

出　　处：《通信学报》2016年第9期154-167,共14页Journal on Communications

基　　金：国家高技术研究发展计划("863"计划)基金资助项目(No.2015AA015603);江苏省未来网络创新研究院未来网络前瞻性研究基金资助项目(No.BY2013095-5-03);江苏省"六大人才高峰"高层次人才基金资助项目(No.2011-DZ024);中央高校基本科研业务费专项资金;江苏省普通高校研究生科研创新计划基金资助项目(No.KYLX15_0118)~~

摘　　要：鉴于加密流量识别技术的重要性和已有相关研究工作,首先根据流量分析需求的层次介绍了加密流量识别的类型,如协议、应用和服务。其次,概述已有加密流量识别技术,并从多个角度进行分析对比。最后,归纳现有加密流量识别研究存在的不足及影响当前加密流量识别的因素,如隧道技术、流量伪装技术、新型协议HTTP/2.0和QUIC等,并对加密流量识别趋势及未来研究方向进行展望。Considering the importance of encrypted traffic identification technology and existing research work, first, the type of encrypted traffic identification according to the demand of traffic analysis were introduced, such as protocols, applications and services. Second, the encrypted traffic identification technology was summarized, and identification technology was compared from multiple views. Third, the deficiencies and the affecting factors of the existing encrypted traffic identification technologies were induced, such as tunneling, traffic camouflage technology, new protocols of HTTP/2.0 and QUIC. Finally, prospect trends and directions of future research on encrypted traffic identification were discussed.

关 键 词：加密流量识别 网络管理 流量工程 流量伪装 HTTP/2.0 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]