Towards real-time performance monitoring for encrypted traffic

Abstract

IP networks are increasingly carrying mission-critical applications with robust end-to-end network performance and reliability requirements. Network performance monitoring forms an essential component of critical IP network management functions such as troubleshooting, anomaly detection, and Service-Level-Agreement (SLA) compliance monitoring. However, privacy and security considerations are fueling the use of IP-level encryption techniques such as IPsec, which obscure important transport layer features that existing performance measurement techniques need. New techniques are therefore needed for monitoring performance of encrypted traffic. Towards this goal, in this paper we present a new technique for monitoring round-trip times (RTT) for IP-level encrypted communications. Our approach involves using network-level features like packet size and inter-packet timing to infer specific timing events, and aggregating measurements across short time intervals and related connections to derive final RTT estimates for network paths of interest. Extensive evaluations using traces from an enterprise and a broadband access network, demonstrate that the resulting RTT estimates are quite accurate.

A Survey on Real-Time Secure Transport System

“…IPSec consists of a set of security protocols that provide security services for applications that use the Internet Protocol (IP) [1]. These protocols guarantee the secure transmission of data between systems in a networked environment.…”

“…When the ciphertext reach their destination, then people use the same or different means to recover the original message. IP-level encryption involves using network-level features like packet size and interpacket timing to infer specific timing events, and aggregating measurements across short time intervals and related connections to derive final RTT estimates for network paths of interest [6] [1]. Encryption techniques has made the development of real-time secure transport system a breakthrough with the improvements of computer's performance and processing capacity in recent years.…”