The Effectiveness Study of ML-based Methods for Protocol Identification in Different Network Environments

Zhang, Luoshi; Xue, Yadong; Wang, Dawei

doi:10.14257/ijfgcn.2015.8.2.16

Cited by 2 publications

(1 citation statement)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Zhang Luoshi et al evaluated different Machine Learning techniques for traffic classification under different network environments. They found that the identification accuracy was affected more by network scale and network environment, but less by machine learning techniques or statistical features [21]. Meanwhile some resistant methods have been proposed to protect privacy against traffic analysis.…”

Section: Introductionmentioning

confidence: 99%

Attacking HTTPS Secure Search Service through Correlation Analysis of HTTP Webpages Accessed

Qian¹,

Wang²

2017

IJSIA

107

View full text Add to dashboard Cite

It is very common for Internet users to query a search engine when retrieving web information. Sensitive data about search engine user's intentions or behavior can be inferred from his query phrases and the webpages he visits subsequently. In order to protect contents of communications from being eavesdropped, a search engine can adopt HTTPS-by-default to provide bidirectional encryption to protect its users' privacy. Since the majority of webpages indexed in search engine's results pages are still on HTTPenabled websites and the contents of these webpages can be observed by attackers once the user click on the indexed web-links. We propose a novel approach for attacking secure search through correlating analysis of encrypted search with unencrypted webpages the user visits subsequently. We show that a simple weighted TF-DF mechanism is sufficient for selecting guessing phrase candidates. Imitating search engine users, by querying these candidates and enumerating webpages indexed in results pages, we can hit the definite query phrases and meanwhile reconstruct user's web-surfing trails through DNS-based URLs comparison and flow feature statistics-based network traffic analysis. In the experiment including 180 Chinese and English search phrases, we achieved 67.78% hit rate at first guess and 96.11% hit rate within three guesses. Our empirical research shows that HTTPS traffic can be correlated and de-anonymized through HTTP traffic and secure search of search engine is not always secure unless HTTPS-by-default enabled everywhere.

show abstract

Section: Introductionmentioning

confidence: 99%