Network Time Protocol (NTP) is essential for synchronizing time across the Internet, necessitating the detailed examination of NTP device attributes to enhance time synchronization quality. This involves understanding devices’ stratum levels, synchronization accuracy, and compatibility with Network Time Security (NTS), a protocol ensuring the confidentiality and authenticity of NTP. Active detection is a crucial method for analyzing network assets through probe packets for NTP device attribute detection. This study employs active detection to obtain NTP device attributes and their security mechanisms, utilizing asynchronous packet-sending strategies and random address generation for high-concurrency active probing to increase detection efficiency. A novel NTS device attribute detection approach is proposed by merging multiple unsupported AEAD algorithms in a request. The research, through experiments with public NTP servers, confirms the effectiveness of the proposed approach, where our asynchronous detection outperforms synchronous detection by 3.13%, and AEAD required TLS connections is reduced by 87.9%. It also illuminates the global distribution and accuracy of NTP devices and their low NTS adoption.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Active Detection Based NTP Device Attribute Detection

  • Yilun Liu,
  • Weiping Zhu,
  • Chao Ma,
  • Chuanhe Huang

摘要

Network Time Protocol (NTP) is essential for synchronizing time across the Internet, necessitating the detailed examination of NTP device attributes to enhance time synchronization quality. This involves understanding devices’ stratum levels, synchronization accuracy, and compatibility with Network Time Security (NTS), a protocol ensuring the confidentiality and authenticity of NTP. Active detection is a crucial method for analyzing network assets through probe packets for NTP device attribute detection. This study employs active detection to obtain NTP device attributes and their security mechanisms, utilizing asynchronous packet-sending strategies and random address generation for high-concurrency active probing to increase detection efficiency. A novel NTS device attribute detection approach is proposed by merging multiple unsupported AEAD algorithms in a request. The research, through experiments with public NTP servers, confirms the effectiveness of the proposed approach, where our asynchronous detection outperforms synchronous detection by 3.13%, and AEAD required TLS connections is reduced by 87.9%. It also illuminates the global distribution and accuracy of NTP devices and their low NTS adoption.