{"id":114374,"date":"2024-03-17T12:25:42","date_gmt":"2024-03-17T10:25:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opredelenie-seansov-openvpn-v-tranzitnom-trafike"},"modified":"2024-03-17T12:25:42","modified_gmt":"2024-03-17T10:25:44","slug":"opredelenie-seansov-openvpn-v-tranzitnom-trafike","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/opredelenie-seansov-openvpn-v-tranzitnom-trafike","title":{"rendered":"OpenVPN \u00fcl\u00e9sek meghat\u00e1roz\u00e1sa a tranzitforgalomban.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Michigan State University research group published findings on the ability to identify (VPN Fingerprinting) connections to OpenVPN-based servers while monitoring transit traffic. As a result, three methods for identifying the OpenVPN protocol among other network packets were revealed, which can be utilized in traffic inspection systems to block virtual networks based on OpenVPN. <\/p>\n

A javasolt m\u00f3dszerek tesztel\u00e9se a Merit internetszolg\u00e1ltat\u00f3n\u00e1l, amely t\u00f6bb mint egymilli\u00f3 felhaszn\u00e1l\u00f3t sz\u00e1ml\u00e1l, azt mutatta, hogy az OpenVPN \u00fcl\u00e9sek 85%-\u00e1nak azonos\u00edt\u00e1sa lehets\u00e9ges, alacsony hamis riaszt\u00e1si szint mellett. A valid\u00e1ci\u00f3hoz egy eszk\u00f6zk\u00e9szletet k\u00e9sz\u00edtettek, amely kezdetben passz\u00edv m\u00f3dban, val\u00f3s id\u0151ben az OpenVPN forgalmat azonos\u00edtotta, majd akt\u00edv szerverellen\u0151rz\u00e9ssel biztos\u00edtotta az eredm\u00e9ny helyess\u00e9g\u00e9t. A kutat\u00f3k \u00e1ltal l\u00e9trehozott elemz\u0151 a forgalom \u00e1raml\u00e1s\u00e1t t\u00fckr\u00f6zte, k\u00f6r\u00fclbel\u00fcl 20 Gbps intenzit\u00e1ssal.

\"OpenVPN<\/center> <\/p>\n

During the experiment, the analyzer successfully identified 1718 out of 2000 test OpenVPN connections established by a dummy client, using 40 different standard OpenVPN configurations (the method successfully worked for 39 out of 40 configurations). Additionally, over the eight days of the experiment, 3638 OpenVPN sessions were detected in the transit traffic, of which 3245 sessions were verified. It is noted that the upper limit of false positives in the proposed method is three orders of magnitude lower than in previously suggested methods based on machine learning. <\/p>\n

K\u00fcl\u00f6n \u00e9rt\u00e9kelt\u00e9k az OpenVPN forgalom nyomk\u00f6vet\u00e9se ellen v\u00e9d\u0151 m\u00f3dszerek hat\u00e9konys\u00e1g\u00e1t a kereskedelmi szolg\u00e1ltat\u00e1sokban \u2014 a tesztelt 41 m\u00f3dszer k\u00f6z\u00fcl VPN<\/a>service, which made it possible to identify the traffic in 34 cases. The services that could not be detected used additional layers to hide traffic (for example, routing OpenVPN traffic through an extra encrypted tunnel). Most of the successfully identified services employed traffic distortion using XOR operations, additional obfuscation layers without sufficient random traffic padding, or had unobfuscated OpenVPN services on the same. szerveren<\/a>. <\/p>\n

Az azonos\u00edt\u00e1shoz haszn\u00e1lt m\u00f3dszerek az OpenVPN-re jellemz\u0151 mint\u00e1khoz k\u00f6t\u0151dnek a nem titkos\u00edtott csomagfejl\u00e9cekben, az ACK-csomagok m\u00e9ret\u00e9re \u00e9s a szerver v\u00e1laszaira. Az els\u0151 esetben, a kapcsolattelep\u00edt\u00e9s f\u00e1zis\u00e1ban az 'opcode' mez\u0151h\u00f6z val\u00f3 k\u00f6t\u0151d\u00e9st haszn\u00e1lj\u00e1k az azonos\u00edt\u00e1shoz, amely egy adott \u00e9rt\u00e9ktartom\u00e1nyt vesz fel, \u00e9s bizonyos m\u00f3don v\u00e1ltozik a kapcsolat l\u00e9tes\u00edt\u00e9s\u00e9nek szakasz\u00e1t\u00f3l f\u00fcgg\u0151en. Az azonos\u00edt\u00e1s l\u00e9nyege a kib\u0151v\u00edtett opcode megv\u00e1ltoz\u00e1s\u00e1nak meghat\u00e1roz\u00e1sa az els\u0151 N-csomagban. <\/p>\n

A m\u00e1sodik m\u00f3dszer azon alapul, hogy az ACK-csomagok csak a kapcsolat l\u00e9trehoz\u00e1s\u00e1nak f\u00e1zis\u00e1ban alkalmazhat\u00f3k az OpenVPN-ben, \u00e9s ezeknek specifikus m\u00e9ret\u00fck van. Az azonos\u00edt\u00e1s azon a t\u00e9nyen alapul, hogy a megadott m\u00e9ret\u0171 ACK-csomagok csak a munkamenet bizonyos r\u00e9szein fordulnak el\u0151 (p\u00e9ld\u00e1ul OpenVPN haszn\u00e1latakor az els\u0151 ACK-csomag \u00e1ltal\u00e1ban a harmadik csomag, amely adatokat tartalmaz a munkamenet sor\u00e1n).

\"OpenVPN<\/center> <\/p>\n

A harmadik m\u00f3dszer akt\u00edv ellen\u0151rz\u00e9s, \u00e9s azon alapul, hogy az OpenVPN szerver a kapcsolat megszak\u00edt\u00e1si k\u00e9r\u00e9s\u00e9re egy adott RST-csomagot k\u00fcld (ez az ellen\u0151rz\u00e9s nem m\u0171k\u00f6dik, ha 'tls-auth' m\u00f3dot haszn\u00e1lnak, mivel az OpenVPN szerver ilyenkor figyelmen k\u00edv\u00fcl hagyja a TLS-en nem hiteles\u00edtett \u00fcgyf\u00e9l k\u00e9r\u00e9s\u00e9t).

\"OpenVPN<\/center>
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (VPN Fingerprinting) \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 OpenVPN \u043f\u0440\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0435 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0442\u0440\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 OpenVPN \u0441\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438\u043d\u0441\u043f\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 OpenVPN. \u0422\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0432 \u0441\u0435\u0442\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":114375,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114374","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenVPN munkamenetek azonos\u00edt\u00e1sa a tranzitforgalomban | ProHoster","description":"A Michigan-i Egyetem kutat\u00f3csoportja k\u00f6zz\u00e9tette a kutat\u00e1s eredm\u00e9nyeit, amelyek a VPN azonos\u00edt\u00e1s (VPN Fingerprinting) lehet\u0151s\u00e9g\u00e9t vizsg\u00e1lj\u00e1k OpenVPN-alap\u00fa szerverekhez val\u00f3 kapcsol\u00f3d\u00e1skor a tranzitforgalom megfigyel\u00e9se sor\u00e1n.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/opredelenie-seansov-openvpn-v-tranzitnom-trafike","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0430\u043d\u0441\u043e\u0432 OpenVPN \u0432 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u0435 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (VPN Fingerprinting) \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 OpenVPN \u043f\u0440\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0435 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/opredelenie-seansov-openvpn-v-tranzitnom-trafike","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-17T10:25:44+00:00","article:modified_time":"2024-03-17T10:25:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114374","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-04 14:42:04","updated":"2026-02-09 21:37:59","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/114374","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=114374"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/114374\/revisions"}],"predecessor-version":[{"id":159861,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/114374\/revisions\/159861"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/114375"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=114374"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=114374"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=114374"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}