System and method of middlebox detection and characterization
View Patent ↗A computer-implemented system and method to detect and characterize middleboxes is disclosed. Embodiments of the system and method include a middlebox detection engine to provide a plurality of middlebox detection modules, and to use at least one middlebox detection module of the plurality of middlebox detection modules to determine if a middlebox exists on a path between a first communicating entity of a network and a second communicating entity of the network.
1. A method comprising:
providing a plurality of middlebox detection modules in a server;
using the plurality of middlebox detection modules to determine, by use of a processor, if a middlebox exists on a path between a first communicating entity of a network and a second communicating entity of the network, a first middlebox detection module of the plurality of middlebox detection modules being used is a standalone middlebox detection module that does not download middlebox detection software to a client device, a second middlebox detection module of the plurality of middlebox detection modules including a client-resident portion that is downloaded to the client device and executed on the client device to gather middlebox detection information from the client device; and
aggregating results produced by the plurality of middlebox detection modules to determine from the aggregate results if the middlebox exists on the path between the first communicating entity and the second communicating entity.
2. The method as claimed in claim 1 wherein the plurality of middlebox detection modules includes at least two modules from the group: active responder module, javascript component module, sniffer module, java applet module, and heavyweight java applet module.
3. The method as claimed in claim 1 wherein determining if a middlebox exists includes performing Javascript fingerprinting.
4. An article of manufacture comprising a non-transitory machine-readable storage medium having machine executable instructions embedded thereon, which when executed by a machine, cause the machine to:
provide a plurality of middlebox detection modules in a server;
use the plurality of middlebox detection modules to determine if a middlebox exists on a path between a first communicating entity of a network and a second communicating entity of the network, a first middlebox detection module of the plurality of middlebox detection modules being used is a standalone middlebox detection module that does not download middlebox detection software to a client device, a second middlebox detection module of the plurality of middlebox detection modules including a client-resident portion that is downloaded to the client device and executed on the client device to gather middlebox detection information from the client device; and
aggregate results produced by the plurality of middlebox detection modules to determine from the aggregate results if the middlebox exists on the path between the first communicating entity and the second communicating entity.
5. The article of manufacture as claimed in claim 4 wherein the plurality of middlebox detection modules includes at least two modules from the group: active responder module, javascript component module, sniffer module, java applet module, and heavyweight java applet module.
6. A system comprising:
a processor;
a memory coupled to the processor to store information related to middlebox detection; and
a middlebox detection engine to provide a plurality of middlebox detection modules, to use the plurality of middlebox detection modules to determine if a middlebox exists on a path between a first communicating entity of a network and a second communicating entity of the network, a first middlebox detection module of the plurality of middlebox detection modules being used is a standalone middlebox detection module that does not download middlebox detection software to a client device, a second middlebox detection module of the plurality of middlebox detection modules including a client-resident portion that is downloaded to the client device and executed on the client device to gather middlebox detection information from the client device, and to aggregate results produced by the plurality of middlebox detection modules to determine from the aggregate results if the middlebox exists on the path between the first communicating entity and the second communicating entity.
7. The system as claimed in claim 6 wherein the plurality of middlebox detection modules includes at least two modules from the group: active responder module, javascript component module, sniffer module, java applet module, and heavyweight java applet module.