Exploring QUIC Dynamics: A Large-Scale Dataset for Encrypted Traffic Analysis

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Gahtan, Barak, Shahla, Robert J., Bronstein, Alex M., Cohen, Reuven
Format: Preprint
Veröffentlicht: 2024
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866908377157730304
author Gahtan, Barak
Shahla, Robert J.
Bronstein, Alex M.
Cohen, Reuven
author_facet Gahtan, Barak
Shahla, Robert J.
Bronstein, Alex M.
Cohen, Reuven
contents The increasing adoption of the QUIC transport protocol has transformed encrypted web traffic, necessitating new methodologies for network analysis. However, existing datasets lack the scope, metadata, and decryption capabilities required for robust benchmarking in encrypted traffic research. We introduce VisQUIC, a large-scale dataset of 100,000 labeled QUIC traces from over 44,000 websites, collected over four months. Unlike prior datasets, VisQUIC provides SSL keys for controlled decryption, supports multiple QUIC implementations (Chromium QUIC, Facebooks mvfst, Cloudflares quiche), and introduces a novel image-based representation that enables machine learning-driven encrypted traffic analysis. The dataset includes standardized benchmarking tools, ensuring reproducibility. To demonstrate VisQUICs utility, we present a benchmarking task for estimating HTTP/3 responses in encrypted QUIC traffic, achieving 97% accuracy using only observable packet features. By publicly releasing VisQUIC, we provide an open foundation for advancing encrypted traffic analysis, QUIC security research, and network monitoring.
format Preprint
id arxiv_https___arxiv_org_abs_2410_03728
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Exploring QUIC Dynamics: A Large-Scale Dataset for Encrypted Traffic Analysis
Gahtan, Barak
Shahla, Robert J.
Bronstein, Alex M.
Cohen, Reuven
Networking and Internet Architecture
Artificial Intelligence
Computer Vision and Pattern Recognition
Machine Learning
The increasing adoption of the QUIC transport protocol has transformed encrypted web traffic, necessitating new methodologies for network analysis. However, existing datasets lack the scope, metadata, and decryption capabilities required for robust benchmarking in encrypted traffic research. We introduce VisQUIC, a large-scale dataset of 100,000 labeled QUIC traces from over 44,000 websites, collected over four months. Unlike prior datasets, VisQUIC provides SSL keys for controlled decryption, supports multiple QUIC implementations (Chromium QUIC, Facebooks mvfst, Cloudflares quiche), and introduces a novel image-based representation that enables machine learning-driven encrypted traffic analysis. The dataset includes standardized benchmarking tools, ensuring reproducibility. To demonstrate VisQUICs utility, we present a benchmarking task for estimating HTTP/3 responses in encrypted QUIC traffic, achieving 97% accuracy using only observable packet features. By publicly releasing VisQUIC, we provide an open foundation for advancing encrypted traffic analysis, QUIC security research, and network monitoring.
title Exploring QUIC Dynamics: A Large-Scale Dataset for Encrypted Traffic Analysis
topic Networking and Internet Architecture
Artificial Intelligence
Computer Vision and Pattern Recognition
Machine Learning
url https://arxiv.org/abs/2410.03728