Thesis Details
Monitorování mobilních aplikací pomocí otisků TLS
The main purpose of this thesis is to study the possibility of using TLS fingerprints for mobile application monitoring and apply these methods to monitor network flows created by the Flowmon probe. To create the fingerprints the JA3 and JA3S methods are used. Apart from the TLS fingerprints, the implemented classifier uses SNI values to classify input flows. First, a dataset containing fingerprints of selected applications is created. This dataset is used together with the implemented classifier to classify input flows. Following is a description of the proposed classification methods and the implemented classifier. The classifier is evaluated using the Accuracy, Precision and Recall evaluation metrics. Finally, the classifier is used in several experiments that demonstrate its possible applications.
TLS fingerprinting, JA3 fingerprints, JA3S fingerprints, mobile app monitoring, traffic monitoring, IPFIX, Flowmon probe.
Drábek Vladimír, doc. Ing., CSc. (DCSY FIT BUT), člen
Holík Lukáš, doc. Mgr., Ph.D. (DITS FIT BUT), člen
Hrubý Martin, Ing., Ph.D. (DITS FIT BUT), člen
Očenášek Pavel, Mgr. Ing., Ph.D. (DIFS FIT BUT), člen
@mastersthesis{FITMT24834,
author = "Jan Ko\v{c}\'{i}",
type = "Master's thesis",
title = "Monitorov\'{a}n\'{i} mobiln\'{i}ch aplikac\'{i} pomoc\'{i} otisk\r{u} TLS",
school = "Brno University of Technology, Faculty of Information Technology",
year = 2022,
location = "Brno, CZ",
language = "czech",
url = "https://www.fit.vut.cz/study/thesis/24834/"
}