CAJ | 학술논문

传统深包检测技术需要检测网络包的完整有效载荷，从而给用户隐私安全带来隐患。隐私敏感的深包检测技术在实现较高协议识别率情况下能够有效保护用户隐私。对深包检测技术中涉及的用户隐私进行了研究，根据有效载荷深度对隐私级别进行了划分。设计了根据隐私级别对网络包有效载荷进行截断预处理的方法。针对12种常用协议，使用隐私敏感的深包检测技术进行协议识别，结果表明，隐私敏感的深包检测技术可以获得80%以上的准确率，并严格地限制了用户隐私的泄露。
전통심포검측기술수요검측망락포적완정유효재하，종이급용호은사안전대래은환。은사민감적심포검측기술재실현교고협의식별솔정황하능구유효보호용호은사。대심포검측기술중섭급적용호은사진행료연구，근거유효재하심도대은사급별진행료화분。설계료근거은사급별대망락포유효재하진행절단예처리적방법。침대12충상용협의，사용은사민감적심포검측기술진행협의식별，결과표명，은사민감적심포검측기술가이획득80%이상적준학솔，병엄격지한제료용호은사적설로。
The conventional deep packet inspection technologies usually need to inspect complete payloads of the network packets, and this will bring hidden dangers to the users?privacy. Privacy aware deep packet inspection (PaDPI) can protect users?privacy while getting higher accuracy of identification. Firstly, this paper studies several privacy levels that deep packet inspection involves, and classifies the privacy of packet payload into different levels according to the depth in payloads. Secondly, this paper proposes several schemes to truncate the payloads of network packets according to the privacy levels. Thirdly, this paper evaluates 12 widely used application protocols with those truncated payloads through PaDPI for application protocol identification. The results show that privacy aware deep packet inspec-tion can gain above 80%accuracy on truncated payloads, and can limit the leakage of users?privacy strictly.