The ties that un-bind

Fayed, Marwan; Bauer, Lorenz; Giotsas, Vasileios; Kerola, Sami; Majkowski, Marek; Odintsov, Pavel; Sitnicki, Jakub; Chung, Tae-Sun; Levin, Dave; Mislove, Alan; Wood, Christopher A.; Sullivan, Nick

doi:10.1145/3452296.3472922

Cited by 13 publications

(1 citation statement)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Finally, the closed-world size could be increased by co-hosting multiple websites on one server, making a larger number of websites available behind load balancers, or even decoupling the bindings between IP addresses and hostnames [31]; or even moved to open world if all web traffic would be downloaded via anonymous communication networks (e.g., Tor [28]) or VPNs.…”

Section: Discussion and Recommendationsmentioning

confidence: 99%

Evaluating practical QUIC website fingerprinting defenses for the masses

Siby

Barman

Wood³

et al. 2023

PoPETs

View full text Add to dashboard Cite

Website fingerprinting (WF) is a well-known threat to users' web privacy. New Internet standards, such as QUIC, include padding to support defenses against WF. Previous work on QUIC WF only analyzes the effectiveness of defenses when users are behind a VPN. Yet, this is not how most users browse the Internet. In this paper, we provide a comprehensive evaluation of QUIC-padding-based defenses against WF when users directly browse the web, i.e., without VPNs, HTTPS proxies, or other tunneling protocols. We confirm previous claims that network-layer padding cannot provide effective protection against powerful adversaries capable of observing all traffic traces. We show that the claims hold even against adversaries with constraints on traffic visibility and processing power. We then show that the current approach to web development, in which the use of third-party resources is the norm, impedes the effective use of padding-based defenses as it requires first and third parties to coordinate in order to thwart traffic analysis. We show that even when coordination is possible, in most cases, protection comes at a high cost.

show abstract

Section: Discussion and Recommendationsmentioning

confidence: 99%

Evaluating practical QUIC website fingerprinting defenses for the masses

Siby

Barman

Wood³

et al. 2023

PoPETs

View full text Add to dashboard Cite

show abstract

Disposable identities: Solving web tracking

Bou Abdo,

Zeadally

2024

Journal of Information Security and Applications

View full text Add to dashboard Cite

A Retrospective on Workload Identifiers: From Data Center to Cloud-Native Networks

et al. 2022

View full text Add to dashboard Cite

As applications move to multiple clouds, the network has become a reactive element to support cloud consumption and application needs. Through each generation of network architectures, identifiers and the use of dynamic locators evolved in different levels of the protocol stack. The identifiers and locators type is defined by the isolation boundary and how the architecture considers semantic overload in the IP address. Each solution is an outcome of incrementalism, resulting in application delivery outgrowing the underlying network. This paper contributes an industrial retrospective of how the schemes and mechanisms for identification and location of network entities have evolved in traditional data centers and how they match cloud-native application requirements. Specifically, there is an evaluation of each application artifact that forced necessary changes in the identifiers and locators. Finally, the common themes are highlighted from observations to determine the investigation areas that may play an essential role in the future of cloud-native networking.

show abstract

The ties that un-bind

Cited by 13 publications

References 24 publications

Evaluating practical QUIC website fingerprinting defenses for the masses

Evaluating practical QUIC website fingerprinting defenses for the masses

Disposable identities: Solving web tracking

A Retrospective on Workload Identifiers: From Data Center to Cloud-Native Networks

Contact Info

Product

Resources

About