The parrot is dead: Observing unobservable network communications

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2013, Pages 65-79

  Houmansadr, Amir ^a   Brubaker, Chad ^a   Shmatikov, Vitaly ^a  

^a UNIVERSITY OF TEXAS AT AUSTIN   (United States)

Author keywords

Censorship circumvention; Tor pluggable transports; unobservable communications

Indexed keywords

CENSORSHIP CIRCUMVENTION; CENSORSHIP RESISTANTS; MULTIPLE NETWORKS; NETWORK COMMUNICATIONS; TECHNICAL CAPABILITIES; TOR PLUGGABLE TRANSPORTS; TRAFFIC ANALYSIS; UNOBSERVABLE;

COMMUNICATION SYSTEMS;

EID: 84881249442     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2013.14     Document Type: Conference Paper

References (64)

1. D. Adami, C. Callegari, S. Giordano, M. Pagano, and T. Pepe. Skype-Hunter: A Real-Time System for the Detection and Classification of Skype Traffic. Int. J. Communication Systems, 25(3):386-403, 2012.
2. K. Allen. A Software Developer's Guide to HTTP. http://odetocode.com/ articles/743.aspx.
3. J. Arkko, E. Carrara, F. Lindholm, M. Naslund, and K. Norrman. MIKEY: Multimedia Internet KEYing. RFC 3830.
4. Joining China and Iran, Australia to Filter Internet. http://www.foxnews.com/scitech/2009/12/15/like-china-iran-australia-filter- internet.
5. S. Baset and H. Schulzrinne. An Analysis of the Skype Peer-to-Peer Internet Telephony Protocol. In INFOCOM, 2006.
6. S. Baset and H. Schulzrinne. Skype Relay Calls: Measurements and Experiments. In INFOCOM, 2008.
7. D. Bates, A. Barth, and C. Jackson. Regular Expressions Considered Harmful in Client-side XSS Filters. In WWW, 2010.
8. O. Berthold, H. Federrath, and S. Köpsell. Web MIXes: ASystem for Anonymous and Unobservable Internet Access. In Design Issues in Anonymity and Unobservability, 2000.
9. D. Bonfiglio and M. Mellia. Tracking Down Skype Traffic. In INFOCOM, 2008.
10. D. Bonfiglio, M. Mellia, and M. Meo. Revealing Skype Traffic: When Randomness Plays With You. In SIGCOMM, 2007.
11. R. Breen. Circumventing Browser Connection Limits for Fun and Profit. http://www.ajaxperformance.com/2006/12/18/circumventing-browser-connection- limits-for-fun-and-profit/, 2006.
12. Bridge Easily Detected by GFW. https://trac.torproject.org/projects/tor/ ticket/4185, 2011.
13. Tor BridgeDB. https://gitweb.torproject.org/bridgedb.git/tree.
14. S. Burnett, N. Feamster, and S. Vempala. Chipping Away at Censorship Firewalls with User-Generated Content. In USENIX Security, 2010.
15. I. Cox, J. Kilian, F. T. Leighton, and T. Shamoon. Secure Spread Spectrum Watermarking for Multimedia. IEEE Transactions on Image Processing, 6(12), 1997.
16. Defeat Internet Censorship: Overview of Advanced Technologies and Products. http://www.internetfreedom.org/archive/Defeat-Internet-Censorship- White-Paper.pdf, 2007.
17. R. Dingledine and N. Mathewson. Design of a Blocking-Resistant Anonymity System. https://svn.torproject.org/svn/projects/design-paper/blocking.html.
18. M. Dusi, M. Crotti, F. Gringoli, and L. Salgarelli. Tunnel Hunter: Detecting Application-layer Tunnels with Statistical Fingerprinting. Computer Networks, 53(1):81-97, 2009.
19. K. Dyer, S. Coull, T. Ristenpart, and T. Shrimpton. Format-Transforming Encryption: More than Meets the DPI. Cryptology ePrint Archive, Report 2012/494, 2012.
20. N. Feamster, M. Balazinska, G. Harfst, H. Balakrishnan, and D. Karger. Infranet: Circumventing Web Censorship and Surveillance. In USENIX Security, 2002.
21. R. Fielding, J. Gettys, J. Mogul, H. Frystyk, L. Masinter, P. Leach, and T. Berners-Lee. Hypertext Transfer Protocol - HTTP/1.1. RFC 2616.
22. D. Fifield, N. Hardison, J. Ellithrope, E. Stark, R. Dingledine, D. Boneh, and P. Porras. Evading Censorship with Browser-Based Proxies. In PETS, 2012.
23. E. Freire, A. Ziviani, and R. Salles. On Metrics to Distinguish Skype Flows from HTTP Traffic. J. Netw. Sys. Management, 17(1-2):53-72, 2009.
24. S. Gianvecchio and H. Wang. Detecting Covert Timing Channels: An Entropy-based Approach. In CCS, 2007.
25. S. Guha, N. Daswani, and R. Jain. An Experimental Study of the Skype Peer-to-Peer VoIP System. In IPTPS, 2006.
26. T. Heydt-Benjamin, A. Serjantov, and B. Defend. Nonesuch: a Mix Network with Sender Unobservability. In WPES, 2006.
27. A. Houmansadr, G. Nguyen, M. Caesar, and N. Borisov. Cirripede : Circumvention Infrastructure Using Router Redirection with Plausible Deniability. In CCS, 2011.
28. A. Houmansadr, T. Riedl, N. Borisov, and A. Singer. I Want My Voice to Be Heard: IP over Voice-over-IP for Unobservable Censorship Circumvention. In NDSS, 2013.
29. A. Houmansadr, W. Zhou, M. Caesar, and N. Borisov. SWEET: Serving the Web by Exploiting Email Tunnels. CoRR, abs/1211.3191, 2012.
30. The httprecon Project. http://www.computec.ch/projekte/httprecon/.
31. Internet Censorship Listed: How Does Each Country Compare? http://www.guardian.co.uk/technology/datablog/2012/apr/16/internet-censorship- country-list.
32. Iran Reportedly Blocking Encrypted Internet Traffic. http://arstechnica. com/tech-policy/2012/02/iran-reportedly-blocking-encrypted-internet-traffic.
33. Italy Censors Proxy That Bypasses BTjunkie and Pirate Bay Block. http://tiny.cc/fcmksw.
34. J. Knockel, J. Crandall, and J. Saia. Three Researchers, Five Conjectures: An Empirical Analysis of TOM-Skype Censorship and Surveillance. In FOCI, 2011.
35. J. McNamee. The Slide from Self-regulation to Corporate Censorship. http://www.edri.org/files/EDRI-selfreg-final 20110124.pdf.
36. S. Jana and V. Shmatikov. Abusing File Processing in Malware Detectors for Fun and Profit. In S&P, 2012.
37. D. Kesdogan, M. Borning, and M. Schmeink. Unobservable Surfing on the World Wide Web: Is Private Information Retrieval an Alternative to the MIX based Approach? In PET, 2002.
38. C. Leberknight, M. Chiang, H. Poor, and F. Wong. A Taxonomy of Internet Censorship and Anti-censorship. http://www.princeton.edu/~chiangm/ anticensorship.pdf.
39. D. McCoy, J. Morales, and K. Levchenko. Proximax: A Measurement Based System for Proxies Dissemination. In FC, 2011.
40. J. McLachlan and N. Hopper. On the Risks of Serving Whenever You Surf: Vulnerabilities in Tor's Blocking Resistance Design. In WPES, 2009.
41. H. Moghaddam, B. Li, M. Derakhshani, and I. Goldberg. SkypeMorph: Protocol Obfuscation for Tor Bridges. In CCS, 2012.
42. S. Murdoch and G. Danezis. Low-Cost Traffic Analysis of Tor. In S&P, 2005.
43. S. Murdoch and S. Lewis. Embedding Covert Channels into TCP/IP. In Information Hiding, 2005.
44. A Simple Obfuscating Proxy. https://www.torproject.org/projects/ obfsproxy.html.en.
45. A. Pfitzmann and M. Hansen. Anonymity, Unobservability, and Pseudonymity: A Consolidated Proposal for Terminology. In Design Issues in Anonymity and Unobservability, 2000.
46. Tor: Pluggable transports. https://www.torproject.org/docs/pluggable- transports.html.en.
47. L. Ptáček. Analysis and Detection of Skype Network Traffic. Master's thesis, Masaryk University, 2011.
48. S. Radicati and Q. Hoang. Email Statistics Report, 2011-2015, 2011.
49. H. Roberts, E. Zuckerman, and J. Palfrey. 2007 Circumvention Landscape Report: Methods, Uses, and Tools. http://cyber.law.harvard.edu/sites/cyber.law. harvard.edu/files/2007-Circumvention-Landscape.pdf.
50. J. Rosenberg, R. Mahy, P. Matthews, and D. Wing. Session Traversal Utilities for NAT (STUN). RFC 5389.
51. J. Rosenberg, H. Schulzrinne, G. Camarillo, A. Johnston, J. Peterson, R. Sparks, M. Handley, and E. Schooler. SIP: Session Initiation Protocol. RFC 3261.
52. M. Schuchard, J. Geddes, C. Thompson, and N. Hopper. Routing Around Decoys. In CCS, 2012.
53. H. Schulzrinne, S. L. Casner, R. Frederick, and V. Jacobson. RTP: A Transport Protocol for Real-Time Applications. RFC 3550.
54. D. Schwartz and B. Sterman. Method and Apparatus for Server-side NAT Detection. US Patent US 2006/0187912 A1.
55. Ten ways to discover tor bridges. https://blog.torproject.org/blog/ research-problems-ten-ways-discover-tor-bridges.
56. How Governments Have Tried to Block Tor. https://svn.torproject.org/svn/ projects/presentations/slides-28c3.pdf.
57. Ultrasurf. http://www.ultrareach.com.
58. Virtual Distributed Ethernet. http://vde.sourceforge.net/.
59. Q. Wang, X. Gong, G. Nguyen, A. Houmansadr, and N. Borisov. CensorSpoofer: Asymmetric Communication Using IP Spoofing for Censorship-Resistant Web Browsing. In CCS, 2012.
60. Z. Weinberg, J. Wang, V. Yegneswaran, L. Briesemeister, S. Cheung, F. Wang, and D. Boneh. StegoTorus : A Camouflage Proxy for the Tor Anonymity System. In CCS, 2012.
61. T. Wilde. Knock Knock Knockin on Bridges Doors. https://blog.torproject. org/blog/knock-knock-knockin-bridges-doors, 2012.
62. B. Wiley. Dust: A Blocking-Resistant Internet Transport Protocol. http://blanu.net/Dust.pdf.
63. P. Winter and S. Lindskog. How the Great Firewall of China Is Blocking Tor. In FOCI, 2012.
64. E. Wustrow, S. Wolchok, I. Goldberg, and J. Halderman. Telex: Anticensorship in the Network Infrastructure. In USENIX Security, 2011.