Efficient, Effective, and Realistic Website Fingerprinting Mitigation
Website fingerprinting attacks have been shown to be able to predict the website visited even if the networkconnection is encrypted and anonymized. These attacks have achieved accuracies as high as 92%. Mitigations to these attacks are using cover/decoy network traffic to add noise, padding to ensur...
Main Authors: | , , , |
---|---|
Format: | Article |
Language: | English |
Published: |
European Alliance for Innovation (EAI)
2019-04-01
|
Series: | EAI Endorsed Transactions on Security and Safety |
Subjects: | |
Online Access: | https://eudl.eu/pdf/10.4108/eai.29-1-2019.161977 |
id |
doaj-b5c8ecc8151949d7a89e3d99e3fcef03 |
---|---|
record_format |
Article |
spelling |
doaj-b5c8ecc8151949d7a89e3d99e3fcef032020-11-25T01:31:02ZengEuropean Alliance for Innovation (EAI)EAI Endorsed Transactions on Security and Safety2032-93932019-04-0162010.4108/eai.29-1-2019.161977Efficient, Effective, and Realistic Website Fingerprinting MitigationWeiqi Cui0Jiangmin Yu1Yanmin Gong2Eric Chan-Tin3Oklahoma State University, Stillwater, Oklahoma, USAOklahoma State University, Stillwater, Oklahoma, USAUniversity of Texas - San Antonio, Texas, USALoyola University Chicago, Illinois, USAWebsite fingerprinting attacks have been shown to be able to predict the website visited even if the networkconnection is encrypted and anonymized. These attacks have achieved accuracies as high as 92%. Mitigations to these attacks are using cover/decoy network traffic to add noise, padding to ensure all the network packets are the same size, and introducing network delays to confuse an adversary. Although these mitigations have been shown to be effective, reducing the accuracy to 10%, the overhead is high. The latency overhead is above 100% and the bandwidth overhead is at least 30%. We introduce a new realistic cover traffic algorithm, based on a user’s previous network traffic, to mitigate website fingerprinting attacks. In simulations, our algorithmreduces the accuracy of attacks to 14% with zero latency overhead and about 20% bandwidth overhead. In real-world experiments, our algorithms reduces the accuracy of attacks to 16% with only 20% bandwidthoverhead.https://eudl.eu/pdf/10.4108/eai.29-1-2019.161977privacynoisewebsite fingerprintingcover traffic |
collection |
DOAJ |
language |
English |
format |
Article |
sources |
DOAJ |
author |
Weiqi Cui Jiangmin Yu Yanmin Gong Eric Chan-Tin |
spellingShingle |
Weiqi Cui Jiangmin Yu Yanmin Gong Eric Chan-Tin Efficient, Effective, and Realistic Website Fingerprinting Mitigation EAI Endorsed Transactions on Security and Safety privacy noise website fingerprinting cover traffic |
author_facet |
Weiqi Cui Jiangmin Yu Yanmin Gong Eric Chan-Tin |
author_sort |
Weiqi Cui |
title |
Efficient, Effective, and Realistic Website Fingerprinting Mitigation |
title_short |
Efficient, Effective, and Realistic Website Fingerprinting Mitigation |
title_full |
Efficient, Effective, and Realistic Website Fingerprinting Mitigation |
title_fullStr |
Efficient, Effective, and Realistic Website Fingerprinting Mitigation |
title_full_unstemmed |
Efficient, Effective, and Realistic Website Fingerprinting Mitigation |
title_sort |
efficient, effective, and realistic website fingerprinting mitigation |
publisher |
European Alliance for Innovation (EAI) |
series |
EAI Endorsed Transactions on Security and Safety |
issn |
2032-9393 |
publishDate |
2019-04-01 |
description |
Website fingerprinting attacks have been shown to be able to predict the website visited even if the networkconnection is encrypted and anonymized. These attacks have achieved accuracies as high as 92%. Mitigations to these attacks are using cover/decoy network traffic to add noise, padding to ensure all the network packets are the same size, and introducing network delays to confuse an adversary. Although these mitigations have been shown to be effective, reducing the accuracy to 10%, the overhead is high. The latency overhead is above 100% and the bandwidth overhead is at least 30%. We introduce a new realistic cover traffic algorithm, based on a user’s previous network traffic, to mitigate website fingerprinting attacks. In simulations, our algorithmreduces the accuracy of attacks to 14% with zero latency overhead and about 20% bandwidth overhead. In real-world experiments, our algorithms reduces the accuracy of attacks to 16% with only 20% bandwidthoverhead. |
topic |
privacy noise website fingerprinting cover traffic |
url |
https://eudl.eu/pdf/10.4108/eai.29-1-2019.161977 |
work_keys_str_mv |
AT weiqicui efficienteffectiveandrealisticwebsitefingerprintingmitigation AT jiangminyu efficienteffectiveandrealisticwebsitefingerprintingmitigation AT yanmingong efficienteffectiveandrealisticwebsitefingerprintingmitigation AT ericchantin efficienteffectiveandrealisticwebsitefingerprintingmitigation |
_version_ |
1725088188096053248 |