Survey of side channel attack on encrypted network traffic

Ding LI; Yuefei ZHU; Bin LU; Wei LIN

doi:10.11959/j.issn.2096-109x.2021050

您当前的位置：

首页 >

文章列表页 >

Survey of side channel attack on encrypted network traffic

TopicⅡ: Technology and Application of Cryptology | 更新时间：2024-06-03

- Survey of side channel attack on encrypted network traffic
- Chinese Journal of Network and Information Security Vol. 7, Issue 4, Pages: 114-130(2021)
- 作者机构：
  
  1. 信息工程大学，河南郑州 450001
  2. 数学工程与先进计算国家重点实验室，河南郑州 450001
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2021050
  CLC： TP311
- Online First：2021-08，
  
  Published：15 August 2021
- 稿件说明：
移动端阅览
Ding LI, Yuefei ZHU, Bin LU, et al. Survey of side channel attack on encrypted network traffic[J]. Chinese Journal of Network and Information Security, 2021, 7(4): 114-130.
DOI：

Ding LI, Yuefei ZHU, Bin LU, et al. Survey of side channel attack on encrypted network traffic[J]. Chinese Journal of Network and Information Security, 2021, 7(4): 114-130. DOI： 10.11959/j.issn.2096-109x.2021050.

摘要

网络加密流量侧信道攻击通过分析、提取网络应用通信过程中泄露的数据包长度、时间等侧信道信息，能够识别用户的身份和行为，甚至还原用户输入的原始数据。基于信息论建立了网络加密流量侧信道攻击模型，使用统一的模型框架分析了代表性的指纹攻击、击键攻击和语音攻击的方法和效果，讨论了基于隐藏数据包长度和时间信息的防御方法，结合技术发展前沿对未来可能的研究方向进行了展望。

Abstract

By analyzing and extracting information such as packet size and timing leaked during Web application communication

side channel attack on encrypted network traffic is able to recognize users' identity and behavior and even restore the original data entered by users.A model of side channel attack on encrypted network traffic according to information theory was developed.Based on the unified model

the methods and results of representative attacks such as fingerprinting attacks

keystroke attacks and speech attacks were analyzed in detail.Furthermore

defense methods of hiding packet size and timing information were discussed.At last

possible research directions were prospected with the frontiers of technology development.

关键词

Keywords

references

JANSEN B J , RIEH S Y . The seventeen theoretical constructs of information searching and information retrieval [J ] . Journal of the American Society for Information Science and Technology , 2010 , 61 ( 8 ): 1517 - 1534 .

JUNG Y , LIM Y , KIM M . Possibilities and limitations of online document tools for design collaboration:the case of google docs [C ] // Proceedings of the 2017 ACM Conference on Computer Supported Cooperative Work and Social Computing . 2017 : 1096 - 1108 .

SULAIMAN N , CARRASCO R A , CHESTER E G . Performance evaluation of voice call over an IP based network [C ] // Proceedings of the 41st Annual Conference on Information Sciences and Systems . 2007 : 392 - 395 .

JANA S , PANDE A , CHAN A , et al . Mobile video chat:issues and challenges [J ] . IEEE Communications Magazine , 2013 , 51 ( 6 ).

BRUMLEY B B , TUVERI N . Remote timing attacks are still practical [C ] // 16th European Symposium on Research in Computer Security . 2011 : 355 - 371 .

YAROM Y , FALKNER K . FLUSH+RELOAD:a high resolution,low noise,L3 cache side-channel attack [C ] // Proceedings of the 23rd USENIX Security Symposium.USENIX Association . 2014 : 719 - 732 .

WANG T , GOLDBERG I . On realistically attacking tor with website fingerprinting [J ] . Privacy Enhancing Technologies , 2016 , 2016 ( 4 ): 21 - 36 .

AL-NAAMI K , CHANDRA S , MUSTAFA A M , et al . Adaptive encrypted traffic fingerprinting with bi-directional dependence [C ] // Proceedings of the 32nd Annual Conference on Computer Security Applications . 2016 : 177 - 188 .

SONG D X , WAGNER D A , TIAN X . Timing analysis of keystrokes and timing attacks on SSH [C ] // Proceedings of 10th USENIX Security Symposium . 2001 .

CHEN S , WANG R , WANG X , et al . Side-channel leaks in web applications:a reality today,a challenge tomorrow [C ] // IEEE Symposium on Security and Privacy . 2010 : 191 - 206 .

WRIGHT C V , BALLARD L , COULL S E , et al . Spot me if you can:uncovering spoken phrases in encrypted VoIP conversations [C ] // IEEE Symposium on Security and Privacy . 2008 : 35 - 49 .

BACKES M , DOYCHEV G , DÜRMUTH M ,, et al . Speaker recognition in encrypted voice streams [C ] // 15th European Symposium on Research in Computer Security . 2010 : 508 - 523 .

SHANNON C E . A mathematical theory of communication [J ] . The Bell System Technical Journal , 1948 , 27 ( 3 ): 379 - 423 .

BACKES M , DOYCHEV G , KÖPF B , . Preventing side-channel leaks in web traffic:a formal approach [C ] // 20th Annual Network and Distributed System Security Symposium . 2013 .

Let's Encrypt . Percentage of Web pages loaded by firefox using HTTPS [EB ] .

HTTP Archive . Page weight [EB ] .

CHENG H , AVNUR R . Traffic analysis of ssl encrypted web browsing [R ] . 1998 .

HINTZ A , . Fingerprinting websites using traffic analysis [C ] // Privacy Enhancing Technologies . 2002 : 171 - 178 .

SUN Q , SIMON D R , WANG Y , et al . Statistical identification of encrypted web browsing traffic [C ] // IEEE Symposium on Security and Privacy . 2002 : 19 - 30 .

FEGHHI S , LEITH D J . A Web traffic analysis attack using only timing information [J ] . IEEE Transactions Information Forensics and Security , 2016 , 11 ( 8 ): 1747 - 1759 .

BISSIAS G D , LIBERATORE M , JENSEN D D , et al . Privacy vulnerabilities in encrypted HTTP streams [C ] // Privacy Enhancing Technologies . 2005 : 1 - 11 .

LIBERATORE M , LEVINE B N . Inferring the source of encrypted HTTP connections [C ] // Proceedings of the 13th ACM Conference on Computer and Communications Security . 2006 : 255 - 263 .

HERRMANN D , WENDOLSKY R , FEDERRATH H . Website fingerprinting:attacking popular privacy enhancing technologies with the multinomial naሷve-Bayes classifier [C ] // Proceedings of the first ACM Cloud Computing Security Workshop . 2009 : 31 - 42 .

顾晓丹 , 杨明 , 罗军舟 , 等 . 针对SSH匿名流量的网站指纹攻击方法 [J ] . 计算机学报 , 2015 , 38 ( 4 ): 135 - 147 .

GU X , YANG M , LUO J , et al . Website fingerprinting attack based on hyperlink relations [J ] . Chinese Journal of Computers , 2015 , 38 ( 4 ): 135 - 147 .

PANCHENKO A , NIESSEN L , ZINNEN A , et al . Website fingerprinting in onion routing based anonymization networks [C ] // Proceedings of the 10th Annual ACM Workshop on Privacy in the Electronic Society . 2011 : 103 - 114 .

CAI X , ZHANG X C , JOSHI B , et al . Touching from a distance:website fingerprinting attacks and defenses [C ] // Proceedings of the 2012 ACM Conference on Computer and Communications Security . 2012 : 605 - 616 .

WANG T , GOLDBERG I . Improved website fingerprinting on Tor [C ] // Proceedings of the 12th Annual ACM Workshop on Privacy in the Electronic Society . 2013 : 201 - 212 .

WANG T , CAI X , NITHYANAND R , et al . Effective attacks and provable defenses for website fingerprinting [C ] // Proceedings of the 23rd USENIX Security Symposium.USENIX Association . 2014 : 143 - 157 .

PANCHENKO A , LANZE F , PENNEKAMP J , et al . Website fingerprinting at internet scale [C ] // 23rd Annual Network and Distributed System Security Symposium . 2016 .

HAYES J , DANEZIS G . K-fingerprinting:a robust scalable website fingerprinting technique [C ] // Proceedings of the 25rd USENIX Security Symposium . 2016 : 1187 - 1203 .

ABE K , GOTO S . Fingerprinting attack on tor anonymity using deep learning [J ] . Proceedings of the Asia-Pacific Advanced Network , 2016 , 42 : 15 - 20 .

RIMMER V , PREUVENEERS D , JUÁREZ M ,, et al . Automated website fingerprinting through deep learning [C ] // 25th Annual Network and Distributed System Security Symposium.The Internet Society . 2018 .

SIRINAM P , IMANI M , JUÁREZ M ,, et al . Deep fingerprinting:undermining website fingerprinting defenses with deep learning [C ] // Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security . 2018 : 1928 - 1943 .

BHAT S , LU D , KWON A , et al . Var-CNN:A data-efficient website fingerprinting attack based on deep learning [J ] . Proceedings on Privacy Enhancing Technologies , 2019 ( 4 ): 292 - 310 .

RAHMAN M S , SIRINAM P , MATTHEWS N , et al . Tik-Tok:the utility of packet timing in website fingerprinting attacks [J ] . Proceedings on Privacy Enhancing Technologies , 2020 ( 3 ).

马陈城 , 杜学绘 , 曹利峰 , 等 . 基于深度神经网络burst特征分析的网站指纹攻击方法 [J ] . 计算机研究与发展 , 2020 , 57 ( 4 ): 746 - 766 .

MA C D , DU X H , CAO L F , et al . Burst-analysis website finger-printing attack based on deep neural network [J ] . Journal of Com-puter Research and Development , 2020 , 57 ( 4 ): 746 - 766 .

DAI S , TONGAONKAR A , WANG X , et al . NetworkProfiler:towards automatic fingerprinting of android APPs [C ] // Proceedings of the IEEE INFOCOM 2013 . 2013 : 809 - 817 .

Google Security Blog . An update on android TLS adoption [EB ] .

CONTI M , MANCINI L V , SPOLAOR R , et al . Analyzing Android encrypted network traffic to identify user actions [J ] . IEEE Transactions on Information Forensics and Security , 2016 , 11 ( 1 ): 114 - 125 .

TAYLOR V F , SPOLAOR R , CONTI M , et al . AppScanner:automatic fingerprinting of smartphone APPs from encrypted network traffic [C ] // IEEE European Symposium on Security and Privacy . 2016 : 439 - 454 .

STÖBER T , FRANK M , SCHMITT J B , et al . Who do you sync you are? smartphone fingerprinting via application behaviour [C ] // Proceedings of the Sixth ACM Conference on Security and Privacy in Wireless and Mobile Networks . 2013 : 7 - 12 .

WANG Q , YAHYAVI A , KEMME B , et al . I know what you did on your smartphone:inferring App usage over encrypted data traffic [C ] // 2015 IEEE Conference on Communications and Network Security . 2015 : 433 - 441 .

ALAN H F , KAUR J . Can android applications be identified using only TCP/IP headers of their launch time traffic? [C ] // Proceedings of the 9th ACM Conference on Security ＆ Privacy in Wireless and Mobile Networks . 2016 : 61 - 66 .

SALTAFORMAGGIO B , CHOI H , JOHNSON K , et al . Eavesdropping on fine-grained user activities within smartphone apps over encrypted network traffic [C ] // 10th USENIX Workshop on Offensive Technologies.USENIX Association . 2016 .

TAYLOR V F , SPOLAOR R , CONTI M , et al . Robust smartphone app identification via encrypted network traffic analysis [J ] . IEEE Transactions on Information Forensics and Security , 2018 , 13 ( 1 ): 63 - 78 .

朱迪 , 陈丹伟 . 基于密度聚类和随机森林的移动应用识别技术 [J ] . 计算机工程与应用 , 2020 , 56 ( 4 ): 63 - 68 .

ZHU D , CHEN D W . Technology of mobile application identifica-tion based on density-based clustering and random forest [J ] . Com-puter Engineering and Applications , 2020 , 56 ( 4 ): 63 - 68 .

JOYCE R , GUPTA G K . Identity authentication based on keystroke latencies [J ] . Communication ACM , 1990 , 33 ( 2 ): 168 - 176 .

MONROSE F , RUBIN A D . Keystroke dynamics as a biometric for authentication [J ] . Future Generation Computer Systems , 2000 , 16 ( 4 ): 351 - 359 .

ARAÚJO L C F , SUCUPIRA L H R , LIZÁRRAGA M G , , et al . User authentication through typing biometrics features [J ] . IEEE Transactions on Signal Processing , 2005 , 53 ( 2 ): 851 - 855 .

王林 , 贺冰清 . 采用击键特征曲线差异度的用户身份认证方法 [J ] . 计算机工程与应用 , 2018 , 54 ( 22 ): 160 - 166 , 196 .

WANG L , HE B Q . Keystroke dynamic identity authentication algorithm based on diversity degree of key-stroke feature curve [J ] . Computer Engineering and Applications , 2018 , 54 ( 22 ): 160 - 166 , 196 .

DHAKAL V , FEIT A M , KRISTENSSON P O , et al . Observations on typing from 136 million keystrokes [C ] // Proceedings of the 2018 CHI Conference on Human Factors in Computing Systems . 2018 : 1 - 12 .

SHARMA S A , MENEZES B L . Implementing side-channel attacks on suggest boxes in web applications [C ] // Proceedings of the First International Conference on Security of Internet of Things . 2012 : 57 - 62 .

SCHAUB A , SCHNEIDER E , HOLLENDER A , et al . Attacking suggest boxes in web applications over https using side-channel stochastic algorithms [C ] // Risks and Security of Internet and Systems . 2014 : 116 - 130 .

OH S E , LI S , HOPPER N . Fingerprinting keywords in search queries over tor [J ] . Proceedings on Privacy Enhancing Technologies , 2017 ( 4 ): 251 - 270 .

OH S E , SUNKAM S , HOPPER N . P1-FP:extraction,classification,and prediction of website fingerprints with deep learning [J ] . Proceedings on Privacy Enhancing Technologies , 2019 ( 3 ): 191 - 209 .

MONACO J V , . What are you searching for? a remote keylogging attack on search engine autocomplete [C ] // Proceedings of 28th USENIX Security Symposium . USENIX Association , 2019 : 959 - 976 .

MONACO J V , . Feasibility of a keystroke timing attack on search engines with autocomplete [C ] // 2019 IEEE Security and Privacy Workshops . 2019 : 212 - 217 .

蒋竺芳 . 端到端自动语音识别技术研究 [D ] . 北京:北京邮电大学 , 2019 .

JIANG Z . Research in End-to-end Automatic Speech Recognition Technology [D ] . Beijing:Beijing University of Posts , 2019 .

张瑞珍 , 韩跃平 , 张晓通 . 基于深度 LSTM 的端到端的语音识别 [J ] . 中北大学学报（自然科学版） , 2020 , 41 ( 3 ): 244 - 248 .

ZHANG R , HAN Y , ZHANG X . End-to-end speech recognition based on depth-gated LSTM [J ] . Journal of North University of China（Natural Science Edition) , 2020 , 41 ( 3 ): 224 - 248 .

CMU . The CMU pronouncing dictionary [EB ] .

WRIGHT C V , BALLARD L , MONROSE F , et al . Language identification of encrypted voip traffic:alejandra y roberto or alice and bob? [C ] // Proceedings of 16th USENIX Security Symposium.USENIX Association . 2007 .

WHITE A M , MATTHEWS A R , SNOW K Z , et al . Phonotactic reconstruction of encrypted VoIP conversations:hookt on fon-iks [C ] // IEEE Symposium on Security and Privacy . 2011 : 3 - 18 .

DUPASQUIER B , BURSCHKA S , MCLAUGHLIN K , et al . Analysis of information leakage from encrypted skype conversations [J ] . International Journal of Information Security , 2010 , 9 ( 5 ): 313 - 325 .

KHAN L A , BAIG M S , YOUSSEF A M . Speaker recognition from encrypted VoIP communications [J ] . Digital Investigation , 2010 , 7 ( 1-2 ): 65 - 73 .

WRIGHT C V , COULL S E , MONROSE F . Traffic morphing:an efficient defense against statistical traffic analysis [C ] // 16th Annual Network and Distributed System Security Symposium . 2009 .

LUO X , ZHOU P , CHAN E W W , et al . HTTPOS:sealing information leaks with browser-side obfuscation of encrypted flows [C ] // 18th Annual Network and Distributed System Security Symposium . 2011 .

WANG T , GOLDBERG I . Walkie-talkie:an efficient defense against passive website fingerprinting attacks [C ] // Proceedings of the 26th USENIX Security Symposium . 2017 : 1375 - 1390 .

SCHWARZ M , LIPP M , GRUSS D , et al . KeyDrown:eliminating software-based keystroke timing side-channel attacks [C ] // 25th Annual Network and Distributed System Security Symposium . 2018 .

DYER K P , COULL S E , RISTENPART T , et al . Peek-a-boo,I still see you:why efficient traffic analysis countermeasures fail [C ] // IEEE Symposium on Security and Privacy . IEEE Computer Society , 2012 : 332 - 346 .

CAI X , NITHYANAND R , WANG T , et al . A systematic approach to developing and evaluating website fingerprinting defenses [C ] // Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security . 2014 : 227 - 238 .

JUÁREZ M , IMANI M , PERRY M , et al . Toward an efficient website fingerprinting defense [C ] // 21st European Symposium on Research in Computer Security . 2016 : 27 - 46 .

LI S , GUO H , HOPPER N . Measuring information leakage in website fingerprinting attacks and defenses [C ] // Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security . 2018 : 1977 - 1992 .

Views

899

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Encrypted traffic identification scheme based on sliding window and randomness features

Encrypted traffic classification method based on convolutional neural network

Intellectualized forensic technique for Android pattern locks

Survey of encrypted malicious traffic detection based on deep learning

Network slicing deployment method based on isolation level

Related Author

FU Anmin

XU Yaqian

SU Mang

KUANG Boyu

LIU Jiachi

Zhuhong MA

Rongna XIE

Zongyu LI

Related Institution

School of Cyber Science and Engineering, Nanjing University of Science and Technology

School of Computer Science and Engineering, Nanjing University of Science and Technology

China Center for Information Industry Development

School of Cyber Science and Engineering, Shanghai Jiao Tong University

Key Laboratory of Forensic Science, Shanghai Forensic Service Platform, Ministry of Justice, Academy of Forensic Science

⁰