基於完全合格域名之邊緣網路封包分類器;FQDN-based Packet Classifier on Edge Networks

NCUIR > College of Electrical Engineering & Computer Science > Graduate Institute of Computer Science and Information Engineering > Electronic Thesis & Dissertation > Item 987654321/77797

Please use this identifier to cite or link to this item: http://ir.lib.ncu.edu.tw/handle/987654321/77797

Title:	基於完全合格域名之邊緣網路封包分類器;FQDN-based Packet Classifier on Edge Networks
Authors:	黃啟澤;Huang, Qi-Ze
Contributors:	資訊工程學系
Keywords:	即時封包分類器;完全合格域名;網域名稱系統;軟體路由器;機器學習;深度封包檢測;Real-time Packet Classifier;FQDN;DNS;Software Router;Machine Learning;Deep Packet Inspection
Date:	2018-08-23
Issue Date:	2018-08-31 14:56:43 (UTC+8)
Publisher:	國立中央大學
Abstract:	近年來，邊緣運算的概念逐漸萌芽，由於眾多的物聯網裝置接入廣域網路中，雖然單點裝置運算能力薄弱，但由於數量龐大，綜觀而言是一群不容小覷的邊緣網路運算節點。然而，由於愈來愈多種類的裝置和新的網路協定出現於廣域網路中，訊務分類的難度也愈來愈高，許多研究嘗試使用深度封包檢測、機器學習或網域名稱（DNS）萃取的方式，多數對於內容加密封包之分類效果有限，且無法直接實際部署於真實網路環境中。　　本論文提出之FIPAC封包分類機制，從邊緣網路著手，相較於核心網路，能獲取更多完全合格域名（FQDN）之資訊，配合維基百科和自治系統號碼來分類域名，並透過封包各層資訊追蹤連線，藉此達到自動分類和快速推斷的效果。和其他種分類器相比而言，FIPAC機制更人性化、運算資源需求更少、分類效率更高，也更能維護使用者隱私。有了FIPAC機制，網路維運人員不需要擔心分類機制占用過多運算資源，能夠直接專注在分類結果的運用上，如不同應用程式QoS的控管。　　本論文也使用了軟體路由器，將FIPAC機制部署在邊緣網路中，和市售邊緣網路路由器以及其他種分類器作比較，以實際驗證FIPAC機制的效能和部署的靈活性。;In recent years, the concept of edge computing comes up. Due to the access of many IoT devices to wide-area networks, although the computing power of single node is weak, it offers great possibility when they are grouped. However, as more and more devices and new network protocols appear in the WAN, traffic classification becomes more and more difficult. Many researches attempt to use deep packet inspection, machine learning or domain name system (DNS), which are insufficient for encrypted packages and cannot be directly deployed in real network environments. The FIPAC packet classification mechanism proposed in this paper are intentionally deployed on edge networks for the reason that more fully qualified domain names (FQDNs) are obtained more easily in comparison to core networks. Then, the FQDN can be classified with effective labels fetched from Wikipedia entries and autonomous system number. This is how FIPAC achieves automatic classification and fast inference. Compared with other classifiers, the FIPAC mechanism is more user-friendly and efficient, also, requires less computing resources and respects users’ privacy. With FIPAC, network operators do not need to worry about exhausted computing resources taken by packet classifiers. They can focus on the utilization of classification results, such as QoS control on distinct applications. In this paper, we deploy FIPAC on software router on real edge networks. Compared with commercially available embedded edge routers and other types of classifiers, we verify that FIPAC takes advantages in performance and flexibility.
Appears in Collections:	[Graduate Institute of Computer Science and Information Engineering] Electronic Thesis & Dissertation

Files in This Item:

File	Description	Size	Format
index.html		0Kb	HTML	220	View/Open

社群 sharing

Loading...