On web browsing privacy in anonymized netflows

16th USENIX Security Symposium

Volumn , Issue , 2007, Pages 339-352

  Coull, S E ^a   Collins, M P ^b   Wright, C V ^a   Monrose, F ^a   Reiter, M K ^b  

^a JOHNS HOPKINS UNIVERSITY   (United States)

^b CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANONYMIZATION; COMPLEX STRUCTURE; NEW APPROACHES; PACKET LEVEL; REAL NETWORKS; REAL-WORLD NETWORKS; RESEARCH PURPOSE; STATE OF THE ART;

WEBSITES;

EID: 84937846451     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (33)

1. BISSIAS, G., LIBERATORE, M., JENSEN, D., AND LEVINE, B. N. Privacy Vulnerabilities in Encrypted HTTP Streams. In Proceedings of the 5th International Workshop on Privacy Enhancing Technologies (May 2005), pp. 1–11.
2. rd IASTED International Conference on Communications and Computer Networks (October 2005).
3. BREKNE, T., ÅRNES, A., AND ØSLEBØ, A. Anonymization of IP Traffic Monitoring Data – Attacks on Two Prefix-preserving Anonymization Schemes and Some Proposed Remedies. In Proceedings of the Workshop on Privacy Enhancing Technologies (May 2005), pp. 179–196.
4. Cisco IOS NetFlow. http://www.cisco.com/go/ netflow.
5. th European Symposium on Research in Computer Security (September 2006), pp. 1–17.
6. th Annual Network and Distributed System Security Symposium (February 2007). Available at: http://www.cs.jhu.edu/∼fabian/NDSS07.pdf.
7. CRAWDAD: A Community Resource for Archiving Wireless Data at Dartmouth. http://crawdad.cs.dartmouth. edu.
8. DANEZIS, G. Traffic Analysis of the HTTP Protocol over TLS. Unpublished manuscript available at http://homes.esat.kuleuven.be/∼gdanezis/TLSanon.pdf as of February 1, 2007.
9. FAN, J., XU, J., AMMAR, M., AND MOON, S. Prefix-preserving IP Address Anonymization: Measurement-based Security Evaluation and a New Cryptography-based Scheme. Computer Networks 46, 2 (October 2004), 263–272.
10. GUPTA, P., AND MCKEOWN, N. Packet Classification Using Hierarchical Intelligent Cuttings. In Proceedings of Hot Interconnects VII (1999), pp. 147–160.
11. HINTZ, A. Fingerprinting Websites Using Traffic Analysis. In Proceedings of the 2nd International Workshop on Privacy Enhancing Technologies (April 2003), pp. 171–178.
12. KARAGIANNIS, T., PAPAGIANNAKI, K., AND FALOUTSOS, M. BLINC: Multilevel Traffic Classification in the Dark. In Proceedings of ACM SIGCOMM (August 2005), pp. 229–240.
13. KIM, M., KANG, H., AND HONG, J. Towards Peer-to-Peer Traffic Analysis Using Flows. In Self-Managing Distributed Systems, 14th IFIP/IEEE International Workshop on Distributed Systems: Operations and Management (October 2003), pp. 55–67.
14. KOUKIS, D., ANTONATOS, S., AND ANAGNOSTAKIS, K. On the Privacy Risks of Publishing Anonymized IP Network Traces. In Proceedings ofCommunications andMultimedia Security (October 2006), pp. 22–32.
15. KREIBICH, C., AND CROWCROFT, J. Efficient Sequence Alignment of Network Traffic. In Proceedings of the 6th ACM SIGCOMM Conference on Internet Measurement (October 2006), pp. 307–312.
16. th Canadian Conference on AI (May 2004), pp. 133–145.
17. LI, Y., SLAGELL, A., LUO, K., AND YURCIK, W. CANINE: A Combined Conversion and Anonymization Tool for Processing NetFlows for Security. In Proceedings of Tenth International Conference on Telecommunication Systems (2005).
18. LIBERATORE, M., AND LEVINE, B. Inferring the Source of Encrypted HTTP Connections. In Proceedings of the ACM conference on Computer and Communications Security (October 2006), pp. 255–263.
19. MARTIN, D., AND SCHULMAN, A. Deanonymizing users of the safeweb anonymizing service. In Proceedings of the 11th USENIX Security Symposium (August 2002), pp. 123–137.
20. NEAPOLITAN, R. Probabilistic Reasoning in Expert Systems: Theory and Algorithms. John Wiley & Sons, Inc., 1989.
21. NICKLESS, W., NAVARRO, J., AND WINKLER, L. Combining CISCO NetFlow Exports with Relational Database Technology for Usage Statistics, Intrusion Detection, and Network Forensics. In Proceedings of the 14th Large Systems Administration Conference (LISA) (December 2000), pp. 285–290.
22. th International Conference on Cryptology and Network Security (December 2005), pp. 261–273.
23. PANG, R., ALLMAN, M., PAXSON, V., AND LEE, J. The Devil and Packet Trace Anonymization. ACM Computer Communication Review 36, 1 (January 2006), 29–38.
24. PANG, R., AND PAXSON, V. A High-Level Environment for Packet Trace Anonymization and Transformation. In Proceedings of the ACM Special Interest Group in Communications (SIG-COM) Conference (August 2003), pp. 339–351.
25. PETERSON, L., ANDERSON, T., CULLER, D., AND ROSCOE, T. A Blueprint for Introducing Disruptive Technology into the Internet. SIGCOMM Computer Communication Reviews 33, 1 (January 2003), 5964.
26. PREDICT: Protected Repository for the Defense of Infrastructure Against Cyber Threats. http://www.predict.org.
27. SCOTT, D. Multivariate Density Estimation: Theory, Practice, and Visualization. John Wiley & Sons, New York, 1992.
28. SILVERMAN, B. Density Estimation for Statistics and Data Analysis. Chapman & Hall/CRC, 1986.
29. SINGH, S., BABOESCU, F., VARGHESE, G., AND WANG, J. Packet Classification Using Multidimensional Cutting. In Proceedings of ACM SIGCOMM (August 2003), pp. 213–224.
30. SLAGELL, A., LI, Y., AND LUO, K. Sharing Network Logs for Computer Forensics: A New Tool for the Anonymization of NetFlow Records. In Proceedings of Computer Network Forensics Research Workshop (September 2005).
31. SPILIOPOULOU, M., MOBASHER, B., BERENDT, B., AND NAKAGAWA, M. A Framework for the Evaluation of Session Reconstruction Heuristics in Web-Usage Analysis. INFORMS Journal on Computing 15, 2 (April 2003), 171–190.
32. SUN, Q., SIMON, D. R., WANG, Y., RUSSELL, W., PADMANABHAN, V. N., AND QIU, L. Statistical Identification of Encrypted Web Browsing Traffic. In Proceedings of the IEEE Symposium on Security and Privacy (May 2002), pp. 19–31.
33. XIE, Y., SEKAR, V., MALTZ, D., REITER, M. K., AND ZHANG, H. Worm Origin Identification Using Random Moonwalks. In Proceedings of the 2005 IEEE Symposium on Security and Privacy (May 2005), pp. 242–256.