{"id":4298,"date":"2020-10-22T17:33:02","date_gmt":"2020-10-22T08:48:02","guid":{"rendered":"https:\/\/www.inforsec.org\/wp\/?p=4298"},"modified":"2020-10-22T17:33:02","modified_gmt":"2020-10-22T08:48:02","slug":"%e3%80%90ccs-2019%e8%ae%ba%e6%96%87%e8%a7%a3%e8%af%bb%e3%80%91%e7%a6%8f%e5%bb%ba%e5%b8%88%e8%8c%83%e5%a4%a7%e5%ad%a6%e5%ae%81%e5%bb%ba%e5%bb%b7%e6%95%99%e6%8e%88%ef%bc%9aprivdpi-privacy-preserving-enc","status":"publish","type":"post","link":"http:\/\/202.112.238.40\/wp\/?p=4298","title":{"rendered":"\u3010CCS 2019\u8bba\u6587\u89e3\u8bfb\u3011\u798f\u5efa\u5e08\u8303\u5927\u5b66\u5b81\u5efa\u5ef7\u6559\u6388\uff1aPrivDPI-Privacy-Preserving Encrypted Traffic Inspection with Reusable Obfuscated Rules"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"> 2020\u5e748\u670812\u65e5\uff0c\u5728\u7f51\u7edc\u7a7a\u95f4\u5b89\u5168\u56fd\u9645\u5b66\u672f\u6210\u679c\u5206\u4eab\u4f1a \uff08\u4e0b\uff09 \u4e0a \uff0c\u6765\u81ea\u798f\u5efa\u5e08\u8303\u5927\u5b66\u6570\u5b66\u4e0e\u4fe1\u606f\u5b66\u9662\u7684\u5b81\u5efa\u5ef7\u6559\u6388\uff0c\u4ee5\u300a PrivDPI\uff1aPrivacy-Preserving Encrypted Traffic Inspection with Reusable Obfuscated Rules\u300b\u4e3a\u9898\uff0c  \u5206\u4eab\u4e86\u4ed6\u4eec\u53d1\u8868\u5728CCS 2019\u4e0a\u7684\u7814\u7a76\u6210\u679c \u3002<\/p>\n\n\n\n<iframe id=\"video\" src=\"\/\/player.bilibili.com\/player.html?aid=884963105&#038;bvid=BV1zK4y1h7tn&#038;cid=247283244&#038;page=1\" style=\"width:96%\" height=498 width=510 frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe>\n<script>\nvd = document.getElementById(\"shipin\");\nif (vd != null) {\n    vd.style.height = vd.scrollWidth*0.8+\"px\";\n}\n<\/script>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u6f14\u8bb2\u4e3b\u9898\uff1aPrivDPI: Privacy-Preserving Encrypted Traffic Inspection with Reusable Obfuscated Rules<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uff08ACM CCS 2019\uff09<\/strong><br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u5185\u5bb9\u6458\u8981\uff1a<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Network middleboxes perform deep packet inspection (DPI) to detect anomalies and suspicious activities in network traffic. However, increasingly these traffic are encrypted and middleboxes can no longer make sense of them. A recent proposal by Sherry et al. (SIGCOMM 2015), named BlindBox, enables the middlebox to perform inspection in a privacy-preserving manner. BlindBox deploys garbled circuit to generate encrypted rules for the purpose of inspecting the encrypted traffic directly. However, the setup latency (which could be 97s on a ruleset of 3,000 as reported) and overhead size incurred by garbled circuit are high. Since communication can only be commenced after the encrypted rules being generated, such delay is intolerable in many real-time applications. In this work, we present PrivDPI, which reduces the setup delay while retaining similar privacy guarantee. Compared to BlindBox, for a ruleset of 3,000, our encrypted rule generation is 288x faster and requires 290,227x smaller overhead for the first session, and is even 1,036x faster and requires 3424,505x smaller overhead over 20 consecutive sessions. The performance gain is based on a new technique for generating encrypted rules as well as the idea of reusing intermediate results generated in previous sessions across subsequent sessions. This is in contrast to Blindbox which performs encrypted rule generation from scratch for every session. Nevertheless, PrivDPI is 6x slower in generating the encrypted traffic tokens, yet in our implementation, the token encryption rate of PrivDPI is more than 17,271 per second which is sufficient for many real-time applications. Moreover, the intermediate values generated in each session can be reused across subsequent sessions for repeated tokens, which could further speedup token encryption. Overall, our experiment shows that PrivDPI is practical and especially suitable for connections with short flows.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u5609\u5bbe\u7b80\u4ecb\uff1a<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u5b81\u5efa\u5ef7 \u798f\u5efa\u5e08\u8303\u5927\u5b66<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.inforsec.org\/wp\/wp-content\/uploads\/2020\/08\/3-1-300x300.png\" alt=\"\" class=\"wp-image-4151\" width=\"150\" height=\"150\" srcset=\"http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2020\/08\/3-1-300x300.png 300w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2020\/08\/3-1-150x150.png 150w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2020\/08\/3-1-200x200.png 200w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2020\/08\/3-1-144x144.png 144w, http:\/\/202.112.238.40\/wp\/wp-content\/uploads\/2020\/08\/3-1.png 394w\" sizes=\"auto, (max-width: 150px) 100vw, 150px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b81\u5efa\u5ef7\uff0c\u535a\u58eb\uff0c\u798f\u5efa\u5e08\u8303\u5927\u5b66\u6570\u5b66\u4e0e\u4fe1\u606f\u5b66\u9662\u6559\u6388\uff0cACM\u4f1a\u5458\u30022016\u5e7412\u6708\u83b7\u4e0a\u6d77\u4ea4\u901a\u5927\u5b66\u535a\u58eb\u5b66\u4f4d\uff0c\u5148\u540e\u5728\u65b0\u52a0\u5761\u56fd\u7acb\u5927\u5b66\u3001\u65b0\u52a0\u5761\u7ba1\u7406\u5927\u5b66\u4ece\u4e8b\u535a\u58eb\u540e\u7814\u7a76\uff0c\u4e3b\u8981\u4ece\u4e8b\u516c\u94a5\u5bc6\u7801\u3001\u7f51\u7edc\u5b89\u5168\u7b49\u65b9\u9762\u7684\u7814\u7a76\uff0c\u7814\u7a76\u5de5\u4f5c\u4ee5\u7b2c\u4e00\u4f5c\u8005\u8eab\u4efd\u53d1\u8868\u4e8eACM CCS\u3001IEEE TIFS\u3001IEEE TDSC\u3001ESORICS\u7b49\u5b66\u672f\u4f1a\u8bae\u548c\u671f\u520a\u3002\u4e3b\u6301\u56fd\u5bb6\u81ea\u7136\u79d1\u5b66\u57fa\u91d1\u9762\u4e0a\u9879\u76ee1\u9879\uff0c\u53c2\u4e0e\u65b0\u52a0\u5761\u4e0e\u4e2d\u56fd\u591a\u9879\u79d1\u7814\u9879\u76ee\uff0c\u5305\u62ec\u65b0\u52a0\u5761\u653f\u5e9c\u3001\u65b0\u52a0\u5761\u56fd\u7acb\u5927\u5b66\u3001\u65b0\u52a0\u5761\u7535\u4fe1\u4e09\u65b9\u8054\u5408\u9879\u76ee\u3001\u56fd\u5bb6\u81ea\u7136\u79d1\u5b66\u57fa\u91d1A3\u524d\u77bb\u8ba1\u5212\u9879\u76ee\u4e0e\u91cd\u70b9\u9879\u76ee\u7b49\uff0c\u591a\u6b21\u5411\u65b0\u52a0\u5761\u56fd\u9632\u90e8\u3001\u65b0\u52a0\u5761\u7535\u4fe1\u7b49\u673a\u6784\u63d0\u4f9b\u7814\u7a76\u62a5\u544a\uff1b\u62c5\u4efbESORICS\u7b49\u5b66\u672f\u4f1a\u8bae\u7a0b\u5e8f\u59d4\u5458\u4f1a\u59d4\u5458\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>2020\u5e748\u670812\u65e5\uff0c\u5728\u7f51\u7edc\u7a7a\u95f4\u5b89\u5168\u56fd\u9645\u5b66\u672f\u6210\u679c\u5206\u4eab\u4f1a \uff08\u4e0b\uff09 \u4e0a \uff0c\u6765\u81ea\u798f\u5efa\u5e08\u8303\u5927\u5b66\u6570\u5b66\u4e0e\u4fe1\u606f\u5b66\u9662&#8230; <a class=\"continue-reading-link\" href=\"http:\/\/202.112.238.40\/wp\/?p=4298\"> Continue reading <span class=\"meta-nav\">&rarr; <\/span><\/a><\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,9],"tags":[],"class_list":["post-4298","post","type-post","status-publish","format-standard","hentry","category-events","category-9"],"_links":{"self":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/4298","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4298"}],"version-history":[{"count":1,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/4298\/revisions"}],"predecessor-version":[{"id":4299,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/4298\/revisions\/4299"}],"wp:attachment":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4298"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4298"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4298"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}