Presentation 2022-03-07
A Method for Identifying Content Delivery Services Using Traffic Information and Public Information from ISP's Perspective
Yuki Tamura, Takao Kondo, Ryo Yasumori, Fumio Teraoka,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) In this paper, we propose a method for identifying the traffic of content delivery services based on flow information (e.g., 5 tuples). In addition, we propose a method for observing ISP-scale traffic in a lightweight manner. Besides flow information, we use BGP routing information and OSINT (Open Source INTeligence) information. Also, we measure the normal behavior at each observation point and determine the statistical threshold of the flow information to identify individual services. In this paper, we identify the traffic caused by content delivery services using the actual traffic of WIDE Backbone (AS2500). As a result, it is found that it is possible to identify the service traffic using only routing information when the content provider uses its own CDN and does not provide other services, and to narrow down the potential services using OSINT information when the service provider provides. When the service provider uses third-party CDNs (Content Delivery Networks), it is difficult to identify the services reliably without OSINT information associated with the service name.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) Network Traffic Analysis / Attribution / Traffic Identification
Paper # SITE2021-47,IA2021-60
Date of Issue 2022-02-28 (SITE, IA)

Conference Information
Committee IA / SITE / IPSJ-IOT
Conference Date 2022/3/7(2days)
Place (in Japanese) (See Japanese page)
Place (in English) Kyoto University, Yoshida Campus
Topics (in Japanese) (See Japanese page)
Topics (in English) Internet and Information Ethics Education, etc.
Chair Tomoki Yoshihisa(Osaka Univ.) / Masaru Ogawa(Kobe Gakuin Univ.)
Vice Chair Toru Kondo(Hiroshima Univ.) / Yuichiro Hei(KDDI Research) / Hiroshi Yamamoto(Ritsumeikan Univ.) / Takushi Otani(Kibi International Univ.) / Takeo Tatsumi(Open Univ. of Japan)
Secretary Toru Kondo(Osaka Univ.) / Yuichiro Hei(Kogakuin Univ.) / Hiroshi Yamamoto(NEC) / Takushi Otani(Yamaguchi Pref Univ.) / Takeo Tatsumi(Hokuriku Univ.)
Assistant Daisuke Kotani(Kyoto Univ.) / Ryo Nakamurai(Fukuoka Univ.) / Daiki Nobayashi(Kyushu Inst. of Tech.) / Hideyuki Fujii(NRI-Secure) / Yusuke Tachibana(Fukuoka Inst. of Tech.)

Paper Information
Registration To Technical Committee on Internet Architecture / Technical Committee on Social Implications of Technology and Information Ethics / Special Interest Group on Internet and Operation Technology
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) A Method for Identifying Content Delivery Services Using Traffic Information and Public Information from ISP's Perspective
Sub Title (in English)
Keyword(1) Network Traffic Analysis
Keyword(2) Attribution
Keyword(3) Traffic Identification
1st Author's Name Yuki Tamura
1st Author's Affiliation Keio University(Keio Univ.)
2nd Author's Name Takao Kondo
2nd Author's Affiliation Keio University(Keio Univ.)
3rd Author's Name Ryo Yasumori
3rd Author's Affiliation Keio University(Keio Univ.)
4th Author's Name Fumio Teraoka
4th Author's Affiliation Keio University(Keio Univ.)
Date 2022-03-07
Paper # SITE2021-47,IA2021-60
Volume (vol) vol.121
Number (no) SITE-408,IA-409
Page pp.pp.7-14(SITE), pp.7-14(IA),
#Pages 8
Date of Issue 2022-02-28 (SITE, IA)