政大機構典藏-National Chengchi University Institutional Repository(NCCUR):Item 140.119/149682

政大典藏 > College of Informatics > Executive Master Program of Computer Science of NCCU > Theses > Item 140.119/149682

Please use this identifier to cite or link to this item: https://nccur.lib.nccu.edu.tw/handle/140.119/149682

Title:	即時通訊軟體安全性分析之研究 A Study on Security Analysis of Instant Messaging Applications
Authors:	鄧妤庭 Deng, Yu-Ting
Contributors:	左瑞麟 Tso, Ray-Lin 鄧妤庭 Deng, Yu-Ting
Keywords:	即時通訊軟體網路封包分析檔案分析資料庫分析 Instant messaging applications Network packet analysis File analysis Database analysis
Date:	2024
Issue Date:	2024-02-01 13:00:08 (UTC+8)
Abstract:	近年來各式各樣的即時通訊軟體相繼崛起發展，使得人與人之間的互動更加便利。即時通訊軟體不僅為人們帶來更便捷的交流方式，也造成使用者對安全和隱私的擔憂越來越大。本篇論文將著重在台灣使用率較高的即時通訊軟體LINE、Messenger及由國內開發的即時通訊軟體SKI+進行通訊時之資訊安全議題進行分析及研究，透過網路封包分析、檔案分析及資料庫分析等3種分析方法，澈底瞭解在網路傳輸及行動裝置內部儲存空間中所能發現的資訊，以保證即時通訊軟體在傳輸訊息及在儲存上的安全性，提供使用者去判斷及評估即時通訊軟體的使用與否，以降低自身使用即時通訊軟體的風險。 In recent years, various instant messaging applications have successively emerged and developed, making interpersonal interactions more convenient. Instant messaging applications not only bring people a more convenient way to communicate but also raise concerns among users regarding security and privacy. This paper will focus on analyzing and researching information security issues during communication on three instant messaging applications: widely used in Taiwan—LINE, Messenger, and the domestically developed SKI+. Through three analysis methods—network packet analysis, file analysis, and database analysis—the study aims to thoroughly understand the information that can be discovered in network transmissions and the internal storage space of mobile devices. This analysis aims to ensure the security of message transmission and storage on instant messaging applications. By providing users with the means to assess and evaluate the usage of instant messaging applications, the paper aims to reduce the risks associated with using these applications.
Reference:	[1] 財團法人台灣網路資訊中心(TWNIC), "Table of Content - Internet基本概念", 2003, from http://dns-learning.twnic.net.tw/internet/intro6.html [2] Joseph A. Salowey, Sean Turner, Christopher A. Wood, "TLS 1.3", IETF., 10 August 2018. [3] WIRED, "Hacker Lexicon: What Is End-to-End Encryption? ", 2014, from https://www.wired.com/2014/11/hacker-lexicon-end-to-end-encryption/ [4] Ryota INOUE, "Becoming a "Third Pole" from Japan: Expansion of LINE's Hyper-Localization Strategy in Asia", 2023, from https://www.z-holdings.co.jp/en/strategy/13/ [5] SimilarWeb, "全球最受歡迎的通訊應用程式", 2023, from https://www.similarweb.com/blog/zh-tw/research/market-research/worldwide-messaging-apps/ [6] LINE, "LINE的最低系統需求為何？", 2023, from https://help.line.me/line/android/pc?lang=zh-Hant&contentId=10002433 [7] LINE, "LINE Encryption Report", 2022, from https://linecorp.com/en/security/encryption/2022h1 [8] 財團法人台灣網路資訊中心(TWNIC), "2023年台灣網路報告", 2023年8月29日 [9] Messenger, "哪些作業系統版本支援Messenger應用程式？", 2023, from https://zh-tw.facebook.com/help/messenger-app/197039404112757 [10] 陳冠榮, "不顧FBI反對加密方式,Messenger個人訊息和通話終獲端對端加密", 2023, from https://infosecu.technews.tw/2023/12/10/launching-default-end-to-end-encryption-on-messenger/ [11] Messenger, "Messenger端對端加密功能的意義及運作方式", 2023, from https://zh-tw.facebook.com/help/messenger-app/786613221989782 [12] Matt Joras, Yang Chi, "How Facebook is bringing QUIC to billions", 21 October 2020, from https://engineering.fb.com/2020/10/21/networking-traffic/how-facebook-is-bringing-quic-to-billions/ [13] Chromium Blog, "Experimenting with QUIC", 2013, from https://blog.chromium.org/2013/06/experimenting-with-quic.html [14] Catalin Cimpanu, "HTTP-over-QUIC to be renamed HTTP/3", 12 November 2018, from https://www.zdnet.com/article/http-over-quic-to-be-renamed-http3/ [15] IETF, RFC 9000, 2021. [16] 中央研究院資訊科技創新研究中心, "SKI+ APP操作手冊", 2018. [17] 中央研究院資訊科技創新研究中心, "SKI+即時通", 2021, from https://iptt.sinica.edu.tw/shares/905 [18] SANS Institute InfoSec Reading Room, "iPwn Apps:Pentesting iOS Applications", 2014. [19] 邱金燕, "社群通訊應用程式安全性分析之研究-以LINE即時通APP為例", 國防大學管理學院資訊管理學系碩士班碩士論文, 2017. [20] 陳詰昌, "LINE封包特徵分析預測使用者網路活動", Communications of the CCISA, Vol. 23, No. 3, July 2017
Description:	碩士國立政治大學資訊科學系碩士在職專班 109971004
Source URI:	http://thesis.lib.nccu.edu.tw/record/#G0109971004
Data Type:	thesis
Appears in Collections:	[Executive Master Program of Computer Science of NCCU] Theses

Files in This Item:

File	Description	Size	Format
100401.pdf		6688Kb	Adobe PDF	6	View/Open

社群 sharing

Loading...