{"id":114374,"date":"2024-03-17T12:25:42","date_gmt":"2024-03-17T10:25:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opredelenie-seansov-openvpn-v-tranzitnom-trafike"},"modified":"2024-03-17T12:25:42","modified_gmt":"2024-03-17T10:25:44","slug":"opredelenie-seansov-openvpn-v-tranzitnom-trafike","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/opredelenie-seansov-openvpn-v-tranzitnom-trafike","title":{"rendered":"P\u00ebrcaktimi i sesioneve OpenVPN n\u00eb trafikun transit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb grup studiuesish nga Universiteti i Michigan publikoi rezultatet e nj\u00eb studimi mbi mund\u00ebsit\u00eb e identifikimit (VPN Fingerprinting) t\u00eb lidhjeve me server\u00ebt e bazuar n\u00eb OpenVPN gjat\u00eb monitorimit t\u00eb trafikut kalues. Si rezultat, u identifikuan tre m\u00ebnyra p\u00ebr t\u00eb identifikuar protokollin OpenVPN midis paketave t\u00eb tjera rrjetore, t\u00eb cilat mund t\u00eb p\u00ebrdoren n\u00eb sistemet e inspektimit t\u00eb trafik p\u00ebr t\u00eb bllokuar rrjetet virtuale t\u00eb bazuara n\u00eb OpenVPN. <\/p>\n

Testimi i metodave t\u00eb propozuara n\u00eb rrjetin e ofruesit t\u00eb internetit Merit, q\u00eb num\u00ebron mbi nj\u00eb milion p\u00ebrdorues, tregoi mund\u00ebsin\u00eb e identifikimit t\u00eb 85% t\u00eb seancave OpenVPN me nj\u00eb nivel t\u00eb ul\u00ebt t\u00eb t\u00eb v\u00ebnave t\u00eb gabuara. P\u00ebr verifikim, u p\u00ebrgatit nj\u00eb mjet q\u00eb fillimisht p\u00ebrcaktonte n\u00eb m\u00ebnyr\u00eb pasive trafikun OpenVPN n\u00eb koh\u00eb reale dhe m\u00eb pas konfirmonte sakt\u00ebsin\u00eb e rezultatit p\u00ebrmes nj\u00eb kontrolli aktiv t\u00eb serverit. Analizuesi i krijuar nga hulumtuesit ishte pasqyr\u00eb e trafikut, me intensitetin prej rreth 20 Gbps.

\"P\u00ebrcaktimi<\/center> <\/p>\n

Gjat\u00eb eksperimentit, analizatori arriti t\u00eb identifikonte me sukses 1718 nga 2000 lidhje testuese OpenVPN, t\u00eb vendosura nga nj\u00eb klient fallco, ku u p\u00ebrdor\u00ebn 40 konfiguracione t\u00eb ndryshme tipike OpenVPN (metoda funksionoi me sukses p\u00ebr 39 nga 40 konfiguracione). P\u00ebr m\u00eb tep\u00ebr, gjat\u00eb tet\u00eb dit\u00ebve t\u00eb eksperimentit, n\u00eb trafik kalues u identifikuan 3638 seanca OpenVPN, nga t\u00eb cilat u konfirmuan 3245 seanca. Theksohet se kufiri i sip\u00ebrm i rreziqeve false n\u00eb metod\u00ebn e propozuar \u00ebsht\u00eb tre her\u00eb m\u00eb i ul\u00ebt se n\u00eb metodet e m\u00ebparshme, t\u00eb bazuara n\u00eb p\u00ebrdorimin e m\u00ebsimit t\u00eb makinave. <\/p>\n

Ve\u00e7mas u vler\u00ebsua funksionimi i metodave t\u00eb mbrojtjes nga ndjekja e trafikut OpenVPN n\u00eb sh\u00ebrbimet komerciale - nga 41 t\u00eb testuar VPN<\/a>-trafiku arriti t\u00eb identifikohej n\u00eb 34 raste. Sh\u00ebrbimet, t\u00eb cilat nuk u zbuluan, p\u00ebrve\u00e7 OpenVPN, p\u00ebrdor\u00ebn shtresa t\u00eb tjera p\u00ebr t\u00eb fshehur trafikun (p.sh., duke kaluar trafikun OpenVPN p\u00ebrmes nj\u00eb tuneli t\u00eb ankoruar t\u00eb enkriptuar). N\u00eb shumic\u00ebn e sh\u00ebrbimeve t\u00eb identifikuara me sukses, u p\u00ebrdor manipulimi i trafik me an\u00eb t\u00eb operacionit XOR, shtresa t\u00eb tjera t\u00eb obfraksionit pa plot\u00ebsimin e mjaftuesh\u00ebm t\u00eb rast\u00ebsish\u00ebm t\u00eb trafik dhe pranin\u00eb e sh\u00ebrbimeve OpenVPN t\u00eb pa-obfuruara n\u00eb t\u00eb nj\u00ebjt\u00ebn. server<\/a>. <\/p>\n

Metodat e angazhuara p\u00ebr identifikimin bazohen n\u00eb lidhjen me modele specifike t\u00eb OpenVPN n\u00eb krye t\u00eb paketave t\u00eb pa-kriptura, madh\u00ebsin\u00eb e paketave ACK dhe p\u00ebrgjigjet e serverit. N\u00eb rastin e par\u00eb, si objekt p\u00ebr identifikimin n\u00eb faz\u00ebn e arritjes s\u00eb lidhjes, mund t\u00eb p\u00ebrdoret lidhja me fush\u00ebn \u201copcode\u201d n\u00eb krye t\u00eb paketave, e cila merr nj\u00eb gam\u00eb t\u00eb fiksuar vlerash dhe ndryshon n\u00eb m\u00ebnyr\u00eb t\u00eb caktuar n\u00eb var\u00ebsi t\u00eb faz\u00ebs s\u00eb vendosjes s\u00eb lidhjes. Identifikimi reduktohet n\u00eb identifikimin e nj\u00eb sekuence t\u00eb caktuar t\u00eb ndryshimeve t\u00eb opcode n\u00eb paketat e para N t\u00eb fluxit. <\/p>\n

Metoda e dyt\u00eb bazohet n\u00eb faktin q\u00eb paketat ACK p\u00ebrdoren n\u00eb OpenVPN vet\u00ebm n\u00eb faz\u00ebn e negociat\u00ebs s\u00eb lidhjes dhe gjithashtu kan\u00eb nj\u00eb p\u00ebrmas\u00eb specifike. Identifikimi bazohet n\u00eb at\u00eb se paketat ACK t\u00eb caktuar p\u00ebrmasash ndodhin vet\u00ebm n\u00eb pjes\u00eb t\u00eb caktuara t\u00eb sesionit (p\u00ebr shembull, kur p\u00ebrdoret OpenVPN, paketa e par\u00eb ACK zakonisht \u00ebsht\u00eb paketa e tret\u00eb me t\u00eb dh\u00ebnat e transmetuara n\u00eb seanc\u00eb).

\"P\u00ebrcaktimi<\/center> <\/p>\n

Metoda e tret\u00eb \u00ebsht\u00eb nj\u00eb kontroll aktiv dhe varet nga fakti se n\u00eb p\u00ebrgjigje t\u00eb k\u00ebrkes\u00ebs p\u00ebr t\u00eb rikthyer lidhjen, serveri OpenVPN d\u00ebrgon nj\u00eb paket\u00eb RST t\u00eb caktuar (kontrolli nuk funksionon n\u00eb p\u00ebrdorimin e modit \u201ctls-auth\u201d sepse serveri OpenVPN n\u00eb k\u00ebt\u00eb rast injoron k\u00ebrkesat nga klient\u00ebt q\u00eb nuk jan\u00eb autentikuar p\u00ebrmes TLS).

\"P\u00ebrcaktimi<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (VPN Fingerprinting) \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 OpenVPN \u043f\u0440\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0435 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0442\u0440\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 OpenVPN \u0441\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438\u043d\u0441\u043f\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 OpenVPN. \u0422\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0432 \u0441\u0435\u0442\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":114375,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114374","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Identifikimi i seancave OpenVPN n\u00eb trafikun n\u00eb transit | ProHoster","description":"Nj\u00eb grup studiuesish nga Universiteti i Michigan publikoi rezultatet e nj\u00eb studimi mbi mund\u00ebsin\u00eb e identifikimit (VPN Fingerprinting) t\u00eb lidhjeve me server\u00ebt e bazuar n\u00eb OpenVPN gjat\u00eb monitorimit t\u00eb trafikut n\u00eb transit.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/opredelenie-seansov-openvpn-v-tranzitnom-trafike","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0430\u043d\u0441\u043e\u0432 OpenVPN \u0432 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u0435 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (VPN Fingerprinting) \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 OpenVPN \u043f\u0440\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0435 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/opredelenie-seansov-openvpn-v-tranzitnom-trafike","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-17T10:25:44+00:00","article:modified_time":"2024-03-17T10:25:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114374","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-04 14:42:04","updated":"2026-02-09 21:37:59","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114374","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=114374"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114374\/revisions"}],"predecessor-version":[{"id":159861,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114374\/revisions\/159861"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/114375"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=114374"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=114374"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=114374"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}