Loading...
Please wait, while we are loading the content...
Similar Documents
Website fingerprinting attacks against Tor Browser Bundle: a comparison between HTTP/1.1 and HTTP/2
| Content Provider | Semantic Scholar |
|---|---|
| Author | Halvemaan, K. C. N. |
| Copyright Year | 2017 |
| Abstract | Users of routing networks such as The Second-Generation Onion Router (Tor) expect a high level of anonymity, however, website fingerprinting of Tor traffic can be done with a high accuracy based on metadata of the encrypted data in the Transmission Control Protocol / Internet Protocol (TCP/IP) stream. An eavesdropper listening in on the traffic between the client and the guard node can get an accurate assumption of what website a user has visited by comparing the current stream to a labelled stream from a database that has been collected beforehand. This paper gives a comparison of website fingerprinting attacks between a Tor Browser Bundle (TBB) using just Hypertext Transfer Protocol 1.1 (HTTP/1.1) and a TBB using Hypertext Transfer Protocol 2 (HTTP/2). HTTP/2 has not been enabled by default in the TBB because the code has not been audited and the security implications of enabling it have not been examined. This paper contributes to this study of the implications of using HTTP/2 in TBB. In closed-world experiments an average accuracy of 88.036% (s = 2.0164%) was achieved for HTTP/1.1 and an average accuracy of 86.4585% (s = 3.0871%) for HTTP/2. When training with HTTP/1.1 and testing with HTTP/2 an average accuracy of 64.687% (s = 6.6631%) was achieved. When training with HTTP/2 and testing with HTTP/1.1 an average accuracy of 54.667% (s = 3.5286%) was achieved. The accuracy of an attacker’s website fingerprinting attack will suffer between 20% and 40% when doing a website fingerprinting attack when the Hypertext Transfer Protocol (HTTP) version differs in his model from the one used by its target. |
| File Format | PDF HTM / HTML |
| Alternate Webpage(s) | http://ipv4.delaat.net/rp/2016-2017/p55/presentation.pdf |
| Alternate Webpage(s) | http://ipv4.delaat.net/rp/2016-2017/p55/report.pdf |
| Language | English |
| Access Restriction | Open |
| Content Type | Text |
| Resource Type | Article |
