Share Email Print

Proceedings Paper

A network monitor for HTTPS protocol based on proxy
Author(s): Yangxin Liu; Lingcui Zhang; Shuguang Zhou; Fenghua Li
Format Member Price Non-Member Price
PDF $17.00 $21.00

Paper Abstract

With the explosive growth of harmful Internet information such as pornography, violence, and hate messages, network monitoring is essential. Traditional network monitors is based mainly on bypass monitoring. However, we can’t filter network traffic using bypass monitoring. Meanwhile, only few studies focus on the network monitoring for HTTPS protocol. That is because HTTPS data is in the encrypted traffic, which makes it difficult to monitor. This paper proposes a network monitor for HTTPS protocol based on proxy. We adopt OpenSSL to establish TLS secure tunes between clients and servers. Epoll is used to handle a large number of concurrent client connections. We also adopt Knuth- Morris-Pratt string searching algorithm (or KMP algorithm) to speed up the search process. Besides, we modify request packets to reduce the risk of errors and modify response packets to improve security. Experiments show that our proxy can monitor the content of all tested HTTPS websites efficiently with little loss of network performance.

Paper Details

Date Published: 7 October 2016
PDF: 7 pages
Proc. SPIE 9902, Fourth International Conference on Wireless and Optical Communications, 99020S (7 October 2016); doi: 10.1117/12.2261978
Show Author Affiliations
Yangxin Liu, Institute of Information Engineering (China)
Lingcui Zhang, Institute of Information Engineering (China)
Shuguang Zhou, Institute of Information Engineering (China)
Fenghua Li, Institute of Information Engineering (China)

Published in SPIE Proceedings Vol. 9902:
Fourth International Conference on Wireless and Optical Communications
Maode Ma, Editor(s)

© SPIE. Terms of Use
Back to Top
Sign in to read the full article
Create a free SPIE account to get access to
premium articles and original research
Forgot your username?