How much anonymity does network latency leak?

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2007, Pages 82-91

  Hopper, Nicholas ^a   Vasserman, Eugene Y ^a   Chan Tin, Eric ^a  

^a UNIVERSITY OF MINNESOTA   (United States)

Author keywords

Anonymity; Latency

Indexed keywords

DATA SETS; EQUAL ERROR RATE; INTERNET HOSTS; LOW-LATENCY; NETWORK COORDINATES; NETWORK LATENCIES; NETWORK LOCATION; NETWORK SERVICES; REMOTE LOGIN; ROUND-TRIP TIME; TIMING INFORMATION; WEB BROWSING;

PACKET NETWORKS; TIMING CIRCUITS; WORLD WIDE WEB;

NETWORK SECURITY;

EID: 70349692738     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1315245.1315257     Document Type: Conference Paper

References (38)

1. TOR (the onion router) servers. http://proxy.org/tor.shtml, 2007.
2. AIKAT, J., KAUR, J., SMITH, F. D., AND JEFFAY, K. Variability in TCP round-trip times. In IMC '03: Proc. 3rd ACM SIGCOMM conference on Internet measurement (New York, NY, USA, 2003), pp. 279-284.
3. BACK, A., MÖLLER, U., AND STIGLIC, A. Traffic analysis attacks and trade-offs in anonymity providing systems. In Proc. Information Hiding Workshop (IH 2001) (April 2001), LNCS 2137, pp. 245-257.
4. BLUM, A., SONG, D., AND VENKATARAMAN, S. Detection of interactive stepping stones: Algorithms and confidence bounds. Proc. 7th Intl Symposium on Recent Advances in Intrusion Detection (RAID) (2004).
5. CHAUM, D. L. Untraceable electronic mail, return addresses, and digital pseudonyms. Communications of the ACM 24, 2 (1981), 84-88.
6. CHUN, B., CULLER, D., ROSCOE, T., BAVIER, A., PETERSON, L., WAWRZONIAK, M., AND BOWMAN, M. Planetlab: an overlay testbed for broad-coverage services. SIGCOMM Comput. Commun. Rev. 33, 3 (2003), 3-12.
7. COSTA, M., CASTRO, M., ROWSTRON, A., AND KEY, P. PIC: Practical internet coordinates for distance estimation. In ICDCS '04: Proc. 24th Intl. Conf. on Distributed Computing Systems (Washington, DC, USA, 2004), IEEE Computer Society, pp. 178-187.
8. DABEK, F., COX, R., KAASHOEK, F., AND MORRIS, R. Vivaldi: a decentralized network coordinate system. In SIGCOMM '04 (New York, NY, USA, 2004), ACM Press, pp. 15-26.
9. DANEZIS, G. Statistical disclosure attacks: Traffic confirmation in open environments. In Proc. Security and Privacy in the Age of Uncertainty, (SEC2003) (Athens, May 2003), IFIP TC11, Kluwer, pp. 421-426.
10. DANEZIS, G., DINGLEDINE, R., AND MATHEWSON, N. Mixminion: Design of a Type III Anonymous Remailer Protocol. In SP '03: Proc. 2003 IEEE Symposium on Security and Privacy (Washington, DC, USA, 2003), IEEE Computer Society, p. 2.
11. DÍAZ, C., AND SERJANTOV, A. Generalising mixes. In Proc. 3rd Privacy Enhancing Technologies workshop (PET 2003) (March 2003), R. Dingledine, Ed., Springer-Verlag, LNCS 2760.
12. DINGLEDINE, R., ET AL. Anonymity bibliography. http://freehaven. net/anonbib, 1999-2007.
13. DINGLEDINE, R., MATHEWSON, N., AND SYVERSON, P. F. Tor:The second-generation onion router. In Proc. 13th USENIX Security Symposium (August 2004).
14. FAWCETT, T. An introduction to ROC analysis. Pattern Recogn. Lett. 27, 8 (2006), 861-874.
15. FEDERRATH, H., ET AL. JAP: Java anonymous proxy. http://anon. inf.tu-dresden. de/.
16. FIELDING, R., GETTYS, J., MOGUL, J., FRYSTYK, H., MASINTER, L., LEACH, P., AND BERNERS-LEE, T. IETF RFC 2616: Hypertext transfer protocol - HTTP/1.1. http://www.ietf.org/rfc/rfc2616.txt, 1999.
17. GIL, T. M., KAASHOEK, F., LI, J., MORRIS, R., AND STRIBLING, J. The "King" data set. http://pdos.csail.mit.edu/p2psim/kingdata/, 2005.
18. GUEYE, B., ZIVIANI, A., CROVELLA, M., AND FDIDA, S. 2006. Constraint-based geolocation of internet hosts. IEEE/ACM Trans. Netw. 14, 6 (Dec. 2006), 1219-1232.
19. GUMMADI, K. P., SAROIU, S., AND GRIBBLE, S. D. King: estimating latency between arbitrary Internet end hosts. Proc. 2nd SIGCOMM Workshop on Internet measurement (2002), 5-18.
20. HINTZ, A. Fingerprinting websites using traffic analysis. In Proc. 2nd Privacy Enhancing Technologies workshop (PET 2002) (April 2002), R. Dingledine and P. Syverson, Eds., Springer-Verlag, LNCS 2482.
21. JRANDOM, ET AL. I2P. http://www.i2p. net/, 2007.
22. KESDOGAN, D., EGNER, J., AND BÜSCHKES, R. Stop-and-go MIXes: Providing probabilistic anonymity in an open system. In Proc. Information Hiding Workshop (IH 1998) (1998), Springer-Verlag, LNCS 1525.
23. LEDLIE, J., GARDNER, P., AND SELTZER, M. Network coordinates in the wild. In Proc. 4th USENIX Symposium on Network Systems Design and Implementation (April 2007).
24. MATHEWSON, N., AND DINGLEDINE, R. Practical traffic analysis: Extending and resisting statistical disclosure. In Proc. 4th Privacy Enhancing Technologies workshop (PET 2004) (May 2004), vol. 3424 of LNCS, pp. 17-34.
25. MOELLER, U., COTTRELL, L., PALFRADER, P., AND SASSAMAN, L. IETF draft: Mixmaster protocol version 2. http://www.ietf.org/internet-drafts/draft- sassaman-mixmaster-03.txt, 2005.
26. MURDOCH, S. J. Hot or not: Revealing hidden services by their clock skew. 13th ACM Conference on Computer and Communications Security (CCS) (2006).
27. MURDOCH, S. J., AND DANEZIS, G. Low-Cost Traffic Analysis of Tor. In SP '05: Proc. 2005 IEEE Symposium on Security and Privacy (Washington, DC, USA, 2005), IEEE Computer Society, pp. 183-195.
28. NG, T. E., AND ZHANG, H. A network positioning system for the Internet. Proc. USENIX Conference (2004).
29. OIKARINEN, J., AND REED, D. IETF RFC 1459: Internet relay chat protocol. http://www.ietf.org/rfc/rfc1459.txt, 1993.
30. ØVERLIER, L., AND SYVERSON, P. Locating Hidden Servers. In SP '06: Proc. 2006 IEEE Symposium on Security and Privacy (S&P'06) (Washington, DC, USA, 2006), IEEE Computer Society, pp. 100-114.
31. REITER, M. K., AND RUBIN, A. D. Crowds: anonymity for web transactions. ACM Transactions on Information and System Security 1, 1 (1998), 66-92.
32. RENNHARD, M., AND PLATTNER, B. Introducing MorphMix: peer-to-peer based anonymous Internet usage with collusion detection. In WPES '02: Proc. 2002 ACM workshop on Privacy in the Electronic Society (New York, NY, USA, 2002), ACM Press, pp. 91-102.
33. ROSENBERG, J., ET AL. SIP: Session Initiation Protocol. IETF RFC 3261, http://tools.ietf.org/html/rfc3261, 2002.
34. SERJANTOV, A., AND SEWELL, P. Passive attack analysis for connection-based anonymity systems. In Proc. ESORICS 2003 (October 2003).
35. SPRING, N., WETHERALL, D., AND ANDERSON, T. Scriptroute: A public Internet measurement facility. USENIX Symposium on Internet Technologies and Systems (USITS) (2003), 225-238.
36. SYVERSON, P., TSUDIK, G., REED, M., AND LANDWEHR, C. Towards an analysis of onion routing security. In Designing Privacy Enhancing Technologies: Proc. Workshop on Design Issues in Anonymity and Unobservability (July 2000), H. Federrath, Ed., Springer-Verlag, LNCS 2009, pp. 96-114.
37. WONG, B., STOYANOV, I., AND SIRER, E. G. 2006. Geolocalization on the internet through constraint satisfaction. In Proc. USENIX WORLDS 2006.
38. WRIGHT, M., ADLER, M., LEVINE, B. N., AND SHIELDS, C. Defending anonymous communication against passive logging attacks. In Proc. 2003 IEEE Symposium on Security and Privacy (May 2003).