Inferring users' online activities through traffic analysis

WiSec'11 - Proceedings of the 4th ACM Conference on Wireless Network Security

Volumn , Issue , 2011, Pages 59-69

  Zhang, Fan ^a,c   He, Wenbo ^a   Liu, Xue ^b   Bridges, Patrick G ^d  

^a UNIVERSITY OF NEBRASKA LINCOLN   (United States)

^b MCGILL UNIVERSITY   (Canada)

^c HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

^d University of New Mexico   (United States)

Author keywords

Machine learning; Privacy; Traffic analysis; Users' online activities

Indexed keywords

APPLICATION SCENARIO; CLASSIFICATION SYSTEM; HIERARCHICAL CLASSIFICATION; IEEE 802.11S; NETWORK ENVIRONMENTS; ON-LINE APPLICATIONS; ON-LINE GAMING; ON-MACHINES; ONLINE ACTIVITIES; PUBLIC AREAS; SHORT PERIODS; TRAFFIC ANALYSIS; UNIVERSITY CAMPUS; USER PRIVACY; WEB BROWSING;

LEARNING ALGORITHMS; LEARNING SYSTEMS; STANDARDS; USER INTERFACES; WIRELESS LOCAL AREA NETWORKS (WLAN);

NETWORK SECURITY;

EID: 80051914578     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1998412.1998425     Document Type: Conference Paper

References (35)

1. S. Chen, R. Wang, X. Wang, and K. Zhang. Side-channel leaks in web applications: A reality today, a challenge tomorrow. In Proceedings of IEEE Symposium on Security and Privacy, pages 191-206, 2010.
2. Q. Sun, D.R. Simon, Y. Wang, W. Russell, V.N. Padmanabhan, and L. Qiu. Statistical identification of encrypted web browsing traffic. In Proceedings of IEEE Symposium on Security and Privacy, 2002.
3. P. Haffner, S. Sen, O. Spatscheck, and D. Wang. ACAS: automated construction of application signatures. In Proceedings of the 2005 ACM SIGCOMM workshop on mining network data, pages 197-202. ACM, 2005. (Pubitemid 41832972)
4. X. Song, D. Wagner, S. David, and X. Tian. Timing analysis of keystrokes and timing attacks on SSH. In Proceedings of USENIX Security Symposium, 2001.
5. T.S. Saponas, J. Lester, C. Hartung, S. Agarwal, and T. Kohno. Devices that tell on you: Privacy trends in consumer ubiquitous computing. In Proceedings of USENIX Security Symposium, 2007.
6. C.V. Wright, L. Ballard, F. Monrose, and G. M. Masson. Language identification of encrypted VoIP traffic: Alejandra y roberto or alice and bob. In Proceedings of USENIX Security Symposium, 2007.
7. C.V. Wright, L. Ballard, S. E. Coull, F. Monrose, and G. M. Masson. Spot me if you can: Uncovering spoken phrases in encrypted VoIP conversations. In Proceedings of IEEE Symposium on Security and Privacy, 2008.
8. M. Liberatore and B. Levine. Inferring the source of encrypted http connections. In Proceedings of Computer and Communications Security, 2006.
9. D. Herrmann, R. Wendolsky, and H. Federrath. Website fingerprinting: attacking popular privacy enhancing technologies with the multinomial naive-bayes classifier. In Proceedings of the 2009 ACM workshop on Cloud computing security, pages 31-42. ACM, 2009.
10. T. Jiang, H.J. Wang, and Y. Hu. Preserving location privacy in wireless LANs. In Proceedings of MobiSys, pages 246-257, 2007. (Pubitemid 47620929)
11. J. Wilson and N. Patwari. See through walls: Motion tracking using variance-based radio tomography networks. IEEE Transactions on Mobile Computing, 2010.
12. V. Srinivasan, J. Stankovic, and K. Whitehouse. Protecting your daily in-home activity information from a wireless snooping attack. In Proceedings of the 10th international conference on Ubiquitous computing, pages 202-211. ACM, 2008.
13. T.T. Nguyen and G. J. Armitage. A survey of techniques for internet traffic classification using machine learning. IEEE Communications Surveys and Tutorials, 10(1-4):56-76, 2008.
14. Internet Assigned Numbers Authority (IANA), August, 2008. http://www.iana.org/assignments/port-numbers.
15. T. Karagiannis, A. Broido, and M. Faloutsos. Transport layer identification of P2P traffic. In Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, pages 121-134. ACM, 2004. (Pubitemid 40372037)
16. T. Karagiannis, K. Papagiannaki, and M. Faloutsos. BLINC: multilevel traffic classification in the dark. ACM SIGCOMM Computer Communication Review, 35(4):229-240, 2005. (Pubitemid 46323507)
17. K. Xu, Z.L. Zhang, and S. Bhattacharyya. Profiling internet backbone traffic: behavior models and applications. ACM SIGCOMM Computer Communication Review, 35(4):169-180, 2005. (Pubitemid 46323502)
18. C.V. Wright, F. Monrose, and G. Masson. HMM Profiles for Network Traffic Classification (Extended Abstract). In Proceedings of Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC). Citeseer, 2004.
19. C.V. Wright, F. Monrose, and G.M. Masson. On inferring application protocol behaviors in encrypted network traffic. The Journal of Machine Learning Research, 7:2745-2769, 2006. (Pubitemid 46011489)
20. A. Dainotti, W.D. Donato, A. Pescape, S. Rossi, et al. Classification of network traffic via packet-level hidden Markov models. In Proceedings of GLOBECOM, pages 1-5. IEEE, 2008.
21. J. Erman, A. Mahanti, M. Arlitt, I. Cohen, and C. Williamson. Offline/realtime traffic classification using semi-supervised learning. Performance Evaluation, 64(9-12):1194-1213, 2007. (Pubitemid 47302132)
22. D. Bonfiglio, M. Mellia, M. Meo, D. Rossi, and P. Tofanelli. Revealing skype traffic: when randomness plays with you. ACM SIGCOMM Computer Communication Review, 37(4):37-48, 2007. (Pubitemid 350239771)
23. L. Bernaille, R. Teixeira, I. Akodkenou, A. Soule, and K. Salamatian. Traffic classification on the fly. ACM SIGCOMM Computer Communication Review, 36(2):23-26, 2006. (Pubitemid 43780945)
24. M. Tavallaee, W. Lu, and A.A. Ghorbani. Online Classification of Network Flows. In Proceedings of Seventh Annual Communication Networks and Services Research Conference, pages 78-85. IEEE, 2009.
25. A. Moore and D. Zuev. Internet traffic classification using Bayesian analysis techniques. ACM SIGMETRICS Performance Evaluation Review, 33(1):50-60, 2005. (Pubitemid 43275409)
26. H. Kim, K. Claffy, M. Fomenkov, D. Barman, M. Faloutsos, and K. Lee. Internet traffic classification demystified: myths, caveats, and the best practices. In Proceedings of the 2008 ACM CoNEXT conference, pages 1-12. ACM, 2008.
27. J. Pang, B. Greenstein, R. Gummadi, S. Seshan, and D. Wetherall. 802.11 user fingerprinting. In Proceedings of MobiCom, pages 99-110. ACM Press, 2007.
28. J. Bardwell. Converting signal strength percentage to dBm values. WildPackets, 2002.
29. N. Williams, S. Zander, and G. Armitage. A preliminary performance comparison of five machine learning algorithms for practical IP traffic flow classification. ACM SIGCOMM Computer Communication Review, 36(5):5-16, 2006.
30. C.W. Hsu and C.J. Lin. A comparison of methods for multiclass support vector machines. Neural Networks, IEEE Transactions on, 13(2):415-425, 2002.
31. S. Cheong, S.H. Oh, and S.Y. Lee. Support vector machines with binary tree architecture for multi-class classification. Neural Information Processing-Letters and Reviews, 2(3):47-51, 2004.
32. B. Fei and J. Liu. Binary tree of SVM: a new fast multiclass training and classification algorithm. Neural Networks, IEEE Transactions on, 17(3):696-704, 2006.
33. G. Madzarov and D. Gjorgjevikj. Multi-class classification using support vector machines in decision tree architecture. In Proceedings of EUROCON 2009, pages 288-295. IEEE.
34. B. Greenstein, D. Mccoy, J. Pang, T. Kohno, S. Seshan, and D. Wetherall. Improving wireless privacy with an identifier-free link layer protocol. In Proceeding of MobiSys, 2008.
35. C.V. Wright, S.E. Coull, and F. Monrose. Traffic morphing: an efficient defense against statistical traffic analysis. In Proceedings of NDSS, 2009.