Visible to the public iMonitor, An APP-Level Traffic Monitoring and Labeling System for iOS Devices

TitleiMonitor, An APP-Level Traffic Monitoring and Labeling System for iOS Devices
Publication TypeConference Paper
Year of Publication2019
AuthorsLiu, Junqiu, Wang, Fei, Zhao, Shuang, Wang, Xin, Chen, Shuhui
Conference Name2019 IEEE International Conference on Computational Science and Engineering (CSE) and IEEE International Conference on Embedded and Ubiquitous Computing (EUC)
Keywords.pcap files, APP labels, APP-level traffic monitoring, APP-related information, compositionality, data privacy, Human Behavior, human factors, iMonitor, ios, iOS (operating system), iOS 9+, iOS devices, iOS Security, labeling system, Metrics, Mobile app, mobile computing, mobile network, mobile network traffic, mobile security, mobile traffic monitoring, Monitoring, network monitor, NetworkExtension framework, privacy, privacy leakage detection, pubcrawl, resilience, Resiliency, Sensors, Servers, smart phones, traffic classification methods, traffic engineering computing, traffic label, User profiling, user-related information, Virtual private networks
AbstractIn this paper, we propose the first traffic monitoring and labeling system for iOS devices, named iMonitor, which not just captures mobile network traffic in .pcap files, but also provides comprehensive APP-related and user-related information of captured packets. Through further analysis, one can obtain the exact APP or device where each packet comes from. The labeled traffic can be used in many research areas for mobile security, such as privacy leakage detection and user profiling. Given the implementation methodology of NetworkExtension framework of iOS 9+, APP labels of iMonitor are reliable enough so that labeled traffic can be regarded as training data for any traffic classification methods. Evaluations on real iPhones demonstrate that iMonitor has no notable impact upon user experience even with slight packet latency. Also, the experiment result supports our motivation that mobile traffic monitoring for iOS is absolutely necessary, as traffic generated by different OSes like Android and iOS are different and unreplaceable in researches.
DOI10.1109/CSE/EUC.2019.00048
Citation Keyliu_imonitor_2019