Scipediacontent: Scipediacontent moved page Draft Content 889182527 to Park Crandall 2010a

2021-02-03T17:53:10Z

Scipediacontent moved page Draft Content 889182527 to Park Crandall 2010a

Scipediacontent: Created page with " == Abstract == We present results from measurements of the filtering of HTTP HTML responses in China, which is based on string matching and TCP reset injection by backbone-l..."

2021-02-03T17:53:06Z

Created page with " == Abstract == We present results from measurements of the filtering of HTTP HTML responses in China, which is based on string matching and TCP reset injection by backbone-l..."

New page

== Abstract ==

We present results from measurements of the filtering of HTTP HTML responses in China, which is based on string matching and TCP reset injection by backbone-level routers. This system, intended mainly for Internet censorship, is a national-scale filter based on intrusion detection system (IDS) technologies. Our results indicate that the Chinese censors discontinued this HTML response filtering for the majority of routes some time between August 2008 and January 2009 (other forms of censorship, including backbone-level GET request filtering, are still in place). In this paper, we give evidence to show that the distributed nature of this filtering system and the problems inherent to distributed filtering are likely among the reasons it was discontinued, in addition to potential traffic load problems. When the censor successfully detected a keyword in our measurements and attempted to reset the connection, their attempt to reset the connection was successful less than 51% of the time, due to late or out-of-sequence resets. In addition to shedding light on why HTML response filtering may have been discontinued by the censors, we document potential sources of uncertainty, which are due to routing and protocol dynamics, that could affect measurements of any form of censorship in any country. Between a single client IP address in China and several contiguous server IP addresses outside China, measurement results can be radically different. This is probably due to either traffic engineering or one node from a bank of IDS systems being chosen based on source IP address. Our data provides a unique opportunity to study a national-scale, distributed filtering system.

== Original document ==

The different versions of the original document can be found in:

* [http://www.cs.unm.edu/%7Ecrandall/icdcs2010.pdf http://www.cs.unm.edu/%7Ecrandall/icdcs2010.pdf]

* [http://xplorestaging.ieee.org/ielx5/5541617/5541620/05541676.pdf?arnumber=5541676 http://xplorestaging.ieee.org/ielx5/5541617/5541620/05541676.pdf?arnumber=5541676],
: [http://dx.doi.org/10.1109/icdcs.2010.46 http://dx.doi.org/10.1109/icdcs.2010.46]

* [https://dblp.uni-trier.de/db/conf/icdcs/icdcs2010.html#ParkC10 https://dblp.uni-trier.de/db/conf/icdcs/icdcs2010.html#ParkC10],
: [https://ieeexplore.ieee.org/document/5541676 https://ieeexplore.ieee.org/document/5541676],
: [https://dl.acm.org/citation.cfm?id=1846215 https://dl.acm.org/citation.cfm?id=1846215],
: [https://asu.pure.elsevier.com/en/publications/empirical-study-of-a-national-scale-distributed-intrusion-detecti https://asu.pure.elsevier.com/en/publications/empirical-study-of-a-national-scale-distributed-intrusion-detecti],
: [http://iar.cs.unm.edu/~crandall/icdcs2010.pdf http://iar.cs.unm.edu/~crandall/icdcs2010.pdf],
: [https://www.computer.org/csdl/proceedings/icdcs/2010/4059/00/4059a315.pdf https://www.computer.org/csdl/proceedings/icdcs/2010/4059/00/4059a315.pdf],
: [https://www.letu.edu/people/jaytevis/Networks/Backbone-Level-Filtering-of-HTML-Responses-icdcs2010.pdf https://www.letu.edu/people/jaytevis/Networks/Backbone-Level-Filtering-of-HTML-Responses-icdcs2010.pdf],
: [https://academic.microsoft.com/#/detail/2139387262 https://academic.microsoft.com/#/detail/2139387262]

← Older revision	Revision as of 17:53, 3 February 2021
(No difference)

Park Crandall 2010a - Revision history

Scipediacontent: Scipediacontent moved page Draft Content 889182527 to Park Crandall 2010a

Scipediacontent: Created page with " == Abstract == We present results from measurements of the filtering of HTTP HTML responses in China, which is based on string matching and TCP reset injection by backbone-l..."