网络中立性违规检测面临的挑战--以Wehe工具为例及其改进
Challenges in Net Neutrality Violation Detection: A Case Study of Wehe Tool and Improvements
摘要：
我们认为，在互联网上检测故意流量歧视的问题。鉴于互联网的复杂性，对蓄意歧视的检测并不容易，而且迄今为止开发的工具受到各种限制。我们研究了检测违规行为的挑战（重点是HTTPS流量），并讨论了可能的缓解方法。我们专注于“Wehe”，这是最新开发的用于检测违反网络中立性的工具。Wehe在一个公共服务器上托管来自所有感兴趣服务的流量，并重放它们以模仿来自原始服务器的流量行为。尽管Wehe的巨大效用和对政策决定的可能影响，但其机制尚未得到其他人的验证。在这项工作中，我们强调了Wehe的关键弱点，其重放流量没有被正确地分类为网络中间盒的预期服务。我们使用商业流量整形器验证了这一观察结果。我们提出了一种新的方法，其中SNI参数设置适当的初始TLS握手，以克服这一弱点。使用商业流量整形器，我们验证了SNI使得重放流量被中间盒正确地分类为预期流量。因此，我们的新方法提供了一种更现实的方法来检测违反HTTPS流量的中立性。
英文摘要：
We consider the problem of detecting deliberate traffic discrimination on the Internet. Given the complex nature of the Internet, detection of deliberate discrimination is not easy to detect, and tools developed so far suffer from various limitations. We study challenges in detecting the violations (focusing on the HTTPS traffic) and discuss possible mitigation approaches. We focus on `Wehe,' the most recent tool developed to detect net-neutrality violations. Wehe hosts traffic from all services of interest in a common server and replays them to mimic the behavior of the traffic from original servers. Despite Wehe's vast utility and possible influences over policy decisions, its mechanisms are not yet validated by others. In this work, we highlight critical weaknesses in Wehe where its replay traffic is not being correctly classified as intended services by the network middleboxes. We validate this observation using a commercial traffic shaper. We propose a new method in which the SNI parameter is set appropriately in the initial TLS handshake to overcome this weakness. Using commercial traffic shapers, we validate that SNI makes the replay traffic gets correctly classified as the intended traffic by the middleboxes. Our new approach thus provides a more realistic method for detecting neutrality violations of HTTPS traffic.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
