NDLI: Exposing invisible timing-based traffic watermarks with BACKLIT

Please wait, while we are loading the content...

Understanding the prevalence and use of alternative plans in malware with network games

Distilling critical attack graph surface iteratively through minimum-cost SAT solving

"Mix-in-Place" anonymous networking using secure function evaluation

The socialbot network: when bots socialize for fame and money

A peel of onion

The science of cyber security experimentation: the DETER project

Facing the facts about image type in recognition-based graphical passwords

Improving robustness of DNS to software vulnerabilities

Exploring the potential benefits of expanded rate limiting in Tor: slow and steady wins the race with Tortoise

SEMAGE: a new image-based two-factor CAPTCHA

ASIDE: IDE support for web application security

An empirical study of visual security cues to prevent the SSLstripping attack

Key escrow from a safe distance: looking back at the Clipper Chip

Reliable telemetry in white spaces using remote attestation

Mitigating code-reuse attacks with control-flow locking

Nexat: a history-based approach to predict attacker actions

BareBox: efficient malware analysis on bare-metal

FORECAST: skimming off the malware cream

RIPE: runtime intrusion prevention evaluator

Security through amnesia: a software-based solution to the cold boot attack on disk encryption

Detecting and resolving privacy conflicts for collaborative data sharing in online social networks

PhorceField: a phish-proof password ceremony

Enabling secure VM-vTPM migration in private clouds

"Super nodes" in Tor: existence and security implication

BLOCK: a black-box approach for detection of state violation attacks towards web applications

Tracking payment card data flow using virtual machine state introspection

AdSentry: comprehensive and flexible confinement of JavaScript-based advertisements

Don't Bump, Shake on It: the exploitation of a popular accelerometer-based smart phone exchange and its secure replacement

deRop: removing return-oriented programming from malware

From prey to hunter: transforming legacy embedded devices into exploitation sensor grids

Automated remote repair for mobile malware

Detecting malware's failover C&C strategies with squeeze

Hit 'em where it hurts: a live security exercise on cyber situational awareness

Private search in the real world

Social snapshots: digital forensics for online social networks

Dynamic sample size detection in continuous authentication using sequential sampling

Exposing invisible timing-based traffic watermarks with BACKLIT

Smart metering de-pseudonymization

A server- and browser-transparent CSRF defense for web 2.0 applications

WebJail: least-privilege integration of third-party components in web mashups

Attacks on WebView in the Android system

Static detection of malicious JavaScript-bearing PDF documents

Exposing invisible timing-based traffic watermarks with BACKLIT

Content Provider	ACM Digital Library
Author	Luo, Xiapu Perdisci, Roberto Lee, Wenke Zhang, Junjie Zhou, Peng Chang, Rocky K. C.
Abstract	Traffic watermarking is an important element in many network security and privacy applications, such as tracing botnet C&C communications and deanonymizing peer-to-peer VoIP calls. The state-of-the-art traffic watermarking schemes are usually based on packet timing information and they are notoriously difficult to detect. In this paper, we show for the first time that even the most sophisticated timing-based watermarking schemes (e.g., RAINBOW and SWIRL) are not invisible by proposing a new detection system called BACKLIT. BACKLIT is designed according to the observation that any practical timing-based traffic watermark will cause noticeable alterations in the intrinsic timing features typical of TCP flows. We propose five metrics that are sufficient for detecting four state-of-the-art traffic watermarks for bulk transfer and interactive traffic. BACKLIT can be easily deployed in stepping stones and anonymity networks (e.g., Tor), because it does not rely on strong assumptions and can be realized in an active or passive mode. We have conducted extensive experiments to evaluate BACKLIT's detection performance using the PlanetLab platform. The results show that BACKLIT can detect watermarked network flows with high accuracy and few false positives.
Starting Page	197
Ending Page	206
Page Count	10
File Format	PDF
ISBN	9781450306720
DOI	10.1145/2076732.2076760
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2011-12-05
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in