Traffic masking in IPsec: Architecture and implementation

2007 16th IST Mobile and Wireless Communications Summit

Volumn , Issue , 2007, Pages

  Kiraly, Csaba ^a   Bianchi, Giuseppe ^b   Formisano, Fabrizio ^b   Teofili, Simone ^b   Cigno, Renato Lo ^a  

^a UNIVERSITY OF TRENTO   (Italy)

^b UNIVERSITY OF ROME TOR VERGATA   (Italy)

Author keywords

Experimental assessment; IPsec; Privacy; Security; Traffic flow confidentiality

Indexed keywords

EXPERIMENTAL ASSESSMENT; INFORMATION ACROSS; IPSEC; IPSEC TUNNELING; KEY COMPONENTS; LINUX 2.6 KERNEL; MALICIOUS USERS; MOBILE AND WIRELESS COMMUNICATIONS; PACKET FORWARDING; PRIVACY; SECURITY; STATISTICAL ANALYSIS; TRAFFIC ANALYSIS; TRAFFIC FLOW CONFIDENTIALITY; TRAFFIC FLOWING; TRAFFIC PATTERNS;

COMPUTER OPERATING SYSTEMS; CRYPTOGRAPHY; MECHANISMS; STATISTICAL METHODS; TELECOMMUNICATION; TRAFFIC SURVEYS;

MACHINE DESIGN;

EID: 50249183539     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISTMWC.2007.4299299     Document Type: Conference Paper

References (23)

1. M. Crotti, F. Gringoli, P. Pelosato, L. Salgarelli, "A statistical approach to IP-level classification of network traffic", the 2006 IEEE International Conference on Communications, 11-15 Jun. 2006.
2. T. Okabe. T. Shinuzo, T. Kitamura, "Statistical Traffic Identification Method Based on Flow-Level Behavior for Fair VoIP service", 1st IEEE ws. on VoIP Management and Security: VoIP MaSe 3rd April 2006.
3. A Hintz, "Fingerprinting Websites Using Traffic Analysis Privacy Enhancing Technologies", second International Workshop, PET 2002 San Francisco, CA, USA, April 14-15, 2002.
4. G. D. Bissias, M. Liberatore, D. Jensen, B. N. Levine, "Privacy Vulnerabilities in Encrypted HTTP Streams" Privacy Enhancing Technologies: 5th Int. Ws, PET 2005, Cavtat, Croatia, May 30, 2005.
5. D. X. Song, D. Wagner, X. Tian, "Timing analysis of keystrokes and timing attacks on SSH", in Tenth USENIX Security Symposium, 2001.
6. B. Canvel, A. Hiltgen, S.Vaudenay, M. Vuagnoux, "Password Interception in a SSL/TLS Channel", CRYPTO2003 August 17-21, 2003, Santa Barbara, USA.
7. S. Vaudenay, "Security Flaws Induced by CBC Padding - application to SSL, IPSEC, WTLS", in Advance in Cryptology EUROCRYPT02 Amsterdam, Netherlands 2002.
8. T. Kohno, A. Broido, K. C. Claffy. "Remote physical device fingerprinting", in IEEE Symposium on Security and Privacy, pages 211-225. IEEE Computer Society, 2005.
9. B. Timmerman, "Secure Dynamic Adaptive Traffic Masking", in New security paradigms workshop, 1999.
10. Y. Guan, X. Fu, D. Xuan, P. Shenoy, R. Bettati, W. Zhao, "NetCamo: Camouflaging Network Traffic for QoS-Guaranteed Mission Critical Applications", IEEE Transactions on System, Man, and Cybernetics, Special Issue on Inf. Assurance, Vol. 31, No. 4, pp. 253-266, July 2001.
11. X. Fu, B. Graham, R. Bettati, W. Zhao, D. Xuan, "Analytical and Empirical Analysis of Countermeasures to Traffic Analysis Attacks", ICPP 2003: 483-492
12. K. Streff, A. Rajagopalan, X. Fu, "ABC: Adaptive Bank-Transaction Camouflaging Systems", ICIW 2006
13. G. Danezis, R. Dingledine, N. Mathewson, "Mixminion: Design of a Type III Anonymous Remailer Protocol", proceedings of the 2003 IEEE Symposium on Security and Privacy, May 2003.
14. R. Dingledine N. Mathewson, P. Syverson, "Tor: The Second-Generation Onion Router", in the Proceedings of the 13th USENIX Security Symposium. August 2004.
15. M. Rennhard, B. Plattner, "Introducing MorphMix: Peer-to-Peer based Anonymous Internet Usage with Collusion Detection", In the Proceedings of the Workshop on Privacy in the Electronic Society (WPES 2002), Washington, DC, USA, November 2002
16. M. J. Freedman, R. Monis, "Tarzan: a Peer-to-Peer Anonymizing Network Layer", Proc. of the 9th ACM Conference on Computer and Communications Security (CCS'02), Washington, DC, Nov. 2002.
17. S. Kent, "IP Encapsulating Security Payload (ESP)", RFC 4303, December 2005.
18. P. Eronen, "IKEv2 Mobility and Multihoming Protocol (MOBIKE)", RFC 4555, June 2006
19. S. Kent, K. Seo, "Security Architecture for the Internet Protocol", RFC 4301, December 2005.
20. T. Dierks, E. Rescorla, "The Transport Layer Security (TLS) Protocol Version 1.1", RFC 4346, April 2006.
21. K. Miyazawa, M. Nakamura, "IPv6 IPsec and Mobile IPv6 implementation of Linux", Linux Symposium 2004, Ottawa, Canada, July 20-24, 2004
22. Netfilter/iptables project homepage: http://www.netfilter.org/
23. Ekiga (former GnomeMeeting) homepage: http://www.ekiga.org/