Name: A Critical Evaluation of Website Fingerprinting Attacks
Start: 2016-04-20T19:00:00-05:00
End: 2016-04-20T20:00:00-05:00
Location: SkullSpace

Title: A Critical Evaluation of Website Fingerprinting Attacks (https://securewww.esat.kuleuven.be/cosic/publications/article-2456.pdf)

Author: Juarez et al.

Published: Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security. ACM, 2014

Abstract:

Recent studies on Website Fingerprinting (WF) claim to have found highly effective attacks on Tor. However, these studies make assumptions about user settings, adversary capabilities, and the nature of the Web that do not necessarily hold in practical scenarios. The following study critically evaluates these assumptions by conducting the attack where the assumptions do not hold. We show that certain variables, for example, user’s browsing habits, differences in location and version of Tor Browser Bundle, that are usually omitted from the current WF model have a significant impact on the efficacy of the attack. We also empirically show how prior work succumbs to the base rate fallacy in the open-world scenario. We address this problem by augmenting our classification method with a verification step. We conclude that even though this approach reduces the number of false positives over 63%, it does not completely solve the problem, which remains an open issue for WF attacks.

Presenter Bio:

Colin "Phoul" Childs is a privacy and anonymity advocate. His interests in privacy, security, and cryptography have led to his work with the Tor Project (https://www.torproject.org/), co-founding the security conference BSides Winnipeg (http://bsideswpg.ca/) and the non-profit security, privacy, and freedom of speech advocacy group Coldhak (https://coldhak.ca/). He can be found tweeting about security, privacy, and politics under the handle @Phoul (https://twitter.com/Phoul).

Alex Weber

Papers We Love — Winnipeg

Technology

Open Source

Software Development

Electronics

New Technology

Web Technology

Computer Programming

Programming Languages

Hacking

Computer Science

Functional Programming

Information Security

Science Technology Engineering Math

Andrew Sinclair

A Critical Evaluation of Website Fingerprinting Attacks

SkullSpace

Share

Papers We Love — Winnipeg

A Critical Evaluation of Website Fingerprinting Attacks

Papers We Love — Winnipeg

Details

Members are also interested in