NetCamo: camouflaging network traffic for QoS-guaranteed mission critical applications

Guan, Yong Liang; Fu, Xinwen; Xuan, Dong; Shenoy, P.U.; Bettati, Riccardo; Zhao, Wei

doi:10.1109/3468.935042

Cited by 72 publications

(3 citation statements)

References 30 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It is conceptually similar to our embed module, but lacks our generic chopper-reassembler and crypto framework. NetCamo [32] is an algorithm for scheduling transmissions to prevent traffic analysis; it is complementary to any of the above, and could also be deployed within existing relay servers to enhance their resistance to global adversaries. Collage [11] is a scheme for steganographically hiding messages within postings on sites that host user-generated content, such as photos, music, and videos.…”

Section: Related Workmentioning

confidence: 99%

StegoTorus

Weinberg

Wang

Yegneswaran

et al. 2012

Proceedings of the 2012 ACM Conference on Computer and Communications Security

View full text Add to dashboard Cite

Internet censorship by governments is an increasingly common practice worldwide. Internet users and censors are locked in an arms race: as users find ways to evade censorship schemes, the censors develop countermeasures for the evasion tactics. One of the most popular and effective circumvention tools, Tor, must regularly adjust its network traffic signature to remain usable.We present StegoTorus, a tool that comprehensively disguises Tor from protocol analysis. To foil analysis of packet contents, Tor's traffic is steganographed to resemble an innocuous cover protocol, such as HTTP. To foil analysis at the transport level, the Tor circuit is distributed over many shorter-lived connections with per-packet characteristics that mimic cover-protocol traffic. Our evaluation demonstrates that StegoTorus improves the resilience of Tor to fingerprinting attacks and delivers usable performance.

show abstract

Section: Related Workmentioning

confidence: 99%

StegoTorus

Weinberg

Wang

Yegneswaran

et al. 2012

Proceedings of the 2012 ACM Conference on Computer and Communications Security

View full text Add to dashboard Cite

show abstract

“…Traffic analysis is one of the most subtle passive attacks; an attacker observes network traffic and surmises sensitive information of the applications of underlying system (Guan et al, 2001). The leakage of sensitive information could create havoc in security sensitive situations.…”

Section: Introductionmentioning

confidence: 99%

Mobile Anonymous Trust Based Routing Using Ant Colony Optimization

J.¹

2012

American Journal of Applied Sciences

View full text Add to dashboard Cite

Aproach: Problem statement: Ad hoc networks are susceptible to malicious attacks through denial of services, traffic analysis and spoofing. The security of the ad hoc routing protocol depends upon encryption, authentication, anonymity and trust factors. End-to-end security of data is provided by encryption and authentication, topology information of the nodes can be obtained by studying traffic and routing data. This security problem of ad hoc network is addressed by the use of anonymity mechanisms and trust levels. Identification information like traffic flow, network topology, paths from malicious attackers is hidden in anonymous networks. Similarly, trust plays a very important role in the intermediate node selection in ad hoc networks. Trust is essential as selfish and malicious nodes not only pose a security issue but also decreases the Quality of Service. Approach: In this study, a routing to address anonymous routing with a trust which improves the overall security of the ad hoc network was proposed. A new approach for an on demand ad-hoc routing algorithm, which was based on swarm intelligence. Ant colony algorithms were a subset of swarm intelligence and considered the ability of simple ants to solve complex problems by cooperation. The interesting point was, that the ants do not need any direct communication for the solution process, instead they communicate by stigmergy. The notion of stigmergy means the indirect communication of individuals through modifying their environment. Several algorithms which were based on ant colony problems were introduced in recent years to solve different problems, e.g., optimization problems. Results and Conclusion: It is observed that the overall security in the network improves when the trust factor is considered. It is seen that non performing nodes are not considered due to the proposed ACO technique.

show abstract

“…The work in [18] analyzes traffic at global choke points to determine the global region where a given service is hosted. These attacks can best be countered by saturating the communications channels [19] leaving no available bandwidth for patterns to emerge. Due to the extreme resource requirements of channel saturation, this approach can only be used in extreme cases.…”

Section: Brief Survey Of Side-channel Attacks On Tunneled Protocolsmentioning

confidence: 99%

Side-Channel Analysis for Detecting Protocol Tunneling

Bhanu¹,

Schwier²,

Craven³

et al. 2011

AIT

View full text Add to dashboard Cite

Protocol tunneling is widely used to add security and/or privacy to Internet applications. Recent research has exposed side channel vulnerabilities that leak information about tunneled protocols. We first discuss the timing side channels that have been found in protocol tunneling tools. We then show how to infer Hidden Markov models (HMMs) of network protocols from timing data and use the HMMs to detect when protocols are active. Unlike previous work, the HMM approach we present requires no a priori knowledge of the protocol. To illustrate the utility of this approach, we detect the use of English or Italian in interactive SSH sessions. For this example application, keystroke-timing data associates inter-packet delays with keystrokes. We first use clustering to extract discrete information from continuous timing data. We use discrete symbols to infer a HMM model, and finally use statistical tests to determine if the observed timing is consistent with the language typing statistics. In our tests, if the correct window size is used, fewer than 2% of data windows are incorrectly identified. Experimental verification shows that on-line detection of language use in interactive encrypted protocol tunnels is reliable. We compare maximum likelihood and statistical hypothesis testing for detecting protocol tunneling. We also discuss how this approach is useful in monitoring mix networks like The Onion Router (Tor).

show abstract

NetCamo: camouflaging network traffic for QoS-guaranteed mission critical applications

Cited by 72 publications

References 30 publications

StegoTorus

StegoTorus

Mobile Anonymous Trust Based Routing Using Ant Colony Optimization

Side-Channel Analysis for Detecting Protocol Tunneling

Contact Info

Product

Resources

About