short-paper

DynaFlow: An Efficient Website Fingerprinting Defense Based on Dynamically-Adjusting Flows

Authors:

Srinivas DevadasAuthors Info & Claims

WPES'18: Proceedings of the 2018 Workshop on Privacy in the Electronic Society

Pages 109 - 113

https://doi.org/10.1145/3267323.3268960

Published: 15 January 2018 Publication History

Abstract

Website fingerprinting attacks enable a local adversary to determine which website a Tor user visits. In recent years, several researchers have proposed defenses to counter these attacks. However, these defenses have shortcomings: many do not provide formal guarantees of security, incur high latency and bandwidth overheads, and require a frequently-updated database of website traffic patterns. In this work, we introduce a new countermeasure, DynaFlow, based on dynamically-adjusting flows to protect against website fingerprinting. DynaFlow provides a similar level of security as current state-of-the-art while being over 40% more efficient. At the same time, DynaFlow does not require a pre-established database and extends protection to dynamically-generated websites.

References

[1]

Alexa. 2017. The Top 500 Sites on the Web . https://www.alexa.com/topsites.

[2]

K. Bauer, D. McCoy, D. Grunwald, T. Kohno, and D. Sicker. 2007. Low-Resource Routing Attacks Against Tor. In WPES. 11--20.

Digital Library

[3]

X. Cai, R. Nithyanand, and R. Johnson. 2014a. CS-BuFLO: A Congestion Sensitive Website Fingerprinting Defense. In WPES . 121--130.

Digital Library

[4]

X. Cai, R. Nithyanand, T. Wang, R. Johnson, and I. Goldberg. 2014b. A Systematic Approach to Developing and Evaluating Website Fingerprinting Defenses. In ACM CCS . 227--238.

Digital Library

[5]

X. Cai, X. Zhang, B. Joshi, and R. Johnson. 2012. Touching from a Distance: Website Fingerprinting Attacks and Defenses. In ACM CCS . 605--616.

Digital Library

[6]

G. Cherubin. 2017. Bayes, not Naïve: Security Bounds on Website Fingerprinting Defenses. In PETS . 215--231.

[7]

G. Cherubin, J. Hayes, and M. Juarez. 2017. Website Fingerprinting Defenses at the Application Layer. In PETS. 186--203.

[8]

R. Dingledine, N. Mathewson, and P. Syverson. 2004. Tor: The Second-Generation Onion Router. In USENIX Security. 303--320.

Digital Library

[9]

K. P. Dyer, S. E. Coull, T. Ristenpart, and T. Shrimpton. 2012. Peek-a-Boo, I Still See You: Why Efficient Traffic Analysis Countermeasures Fail. In IEEE S&P . 332--346.

Digital Library

[10]

J. Hayes and G. Danezis. 2016. k -fingerprinting: A Robust Scalable Website Fingerprinting Technique. In USENIX Security . 1187--1203.

Digital Library

[11]

M. Juarez, M. Imani, M. Perry, C. Diaz, and M. Wright. 2016. Toward an Efficient Website Fingerprinting Defense. In ESORICS. 27--46.

[12]

S. J. Murdoch and P. Zieli'nski. 2007. Sampled Traffic Analysis by Internet-Exchange-Level Adversaries. In PETS . 167--183.

Digital Library

[13]

R. Nithyanand, X. Cai, and R. Johnson. 2014. Glove: A Bespoke Website Fingerprinting Defense . WPES. 131--134.

Digital Library

[14]

A. Panchenko, F. Lanze, A. Zinnen, and M. Henze. 2016. Website Fingerprinting at Internet Scale. In NDSS .

[15]

A. Panchenko, L. Niessen, A. Zinnen, and T. Engel. 2011. Website Fingerprinting in Onion Routing Based Anonymization Networks. In WPES . 103--114.

Digital Library

[16]

The Tor Project. 2018. Tor Metrics Portal. https://metrics.torproject.org.

[17]

T. Wang, X. Cai, R. Johnson, and I. Goldberg. 2014. Effective Attacks and Provable Defenses for Website Fingerprinting. In USENIX Security . 143--157.

Digital Library

[18]

T. Wang and I. Goldberg. 2017. Walkie-Talkie: An Efficient Defense Against Passive Website Fingerprinting Attacks. In USENIX Security. 1375--1390.

Digital Library

Cited By

Huang BDu Y(2024)Break-Pad: effective padding machines for tor with break burst paddingCybersecurity10.1186/s42400-024-00222-y7:1Online publication date: 1-Oct-2024
https://doi.org/10.1186/s42400-024-00222-y
Cebere BRossow C(2024)Understanding Web Fingerprinting with a Protocol-Centric ApproachProceedings of the 27th International Symposium on Research in Attacks, Intrusions and Defenses10.1145/3678890.3678910(17-34)Online publication date: 30-Sep-2024
https://dl.acm.org/doi/10.1145/3678890.3678910
Zhao XDeng XLi QLiu YLiu ZSun KXu KLuo BLiao XXu JKirda ELie D(2024)Towards Fine-Grained Webpage Fingerprinting at ScaleProceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security10.1145/3658644.3690211(423-436)Online publication date: 2-Dec-2024
https://dl.acm.org/doi/10.1145/3658644.3690211
Show More Cited By

Index Terms

DynaFlow: An Efficient Website Fingerprinting Defense Based on Dynamically-Adjusting Flows
1. Networks
  1. Network properties
    1. Network privacy and anonymity
2. Security and privacy
  1. Security services
    1. Privacy-preserving protocols
    2. Pseudonymity, anonymity and untraceability

Recommendations

Deep Fingerprinting: Undermining Website Fingerprinting Defenses with Deep Learning
CCS '18: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security

Website fingerprinting enables a local eavesdropper to determine which websites a user is visiting over an encrypted connection. State-of-the-art website fingerprinting attacks have been shown to be effective even against Tor. Recently, lightweight ...
Measuring Information Leakage in Website Fingerprinting Attacks and Defenses
CCS '18: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security

Tor provides low-latency anonymous and uncensored network access against a local or network adversary. Due to the design choice to minimize traffic overhead (and increase the pool of potential users) Tor allows some information about the client's ...
Glove: A Bespoke Website Fingerprinting Defense
WPES '14: Proceedings of the 13th Workshop on Privacy in the Electronic Society

Website fingerprinting attacks have recently emerged as a serious threat against web browsing privacy mechanisms, such as SSL, Tor, and encrypting tunnels. Researchers have proposed numerous attacks and defenses, and the Tor project currently includes ...

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences

WPES'18: Proceedings of the 2018 Workshop on Privacy in the Electronic Society

October 2018

190 pages

ISBN:9781450359894

DOI:10.1145/3267323

General Chairs:
David Lie
University of Toronto, Canada
,
Mohammad Mannan
Concordia University, Canada
,
Program Chair:
Aaron Johnson
U.S. Naval Research Laboratory, USA

Copyright © 2018 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than the author(s) must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].

Sponsors

SIGSAC: ACM Special Interest Group on Security, Audit, and Control

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 15 January 2018

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Short-paper

Conference

CCS '18

Sponsor:

SIGSAC

CCS '18: 2018 ACM SIGSAC Conference on Computer and Communications Security

October 15, 2018

Toronto, Canada

Acceptance Rates

WPES'18 Paper Acceptance Rate 11 of 25 submissions, 44%;

Overall Acceptance Rate 106 of 355 submissions, 30%

Upcoming Conference

CCS '25

Sponsor:
sigsac

ACM SIGSAC Conference on Computer and Communications Security

October 13 - 17, 2025

Taipei , Taiwan

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

28
Total Citations
View Citations
337
Total Downloads

Downloads (Last 12 months)28
Downloads (Last 6 weeks)4

Reflects downloads up to 28 Dec 2024

Other Metrics

View Author Metrics

Citations

Cited By

Huang BDu Y(2024)Break-Pad: effective padding machines for tor with break burst paddingCybersecurity10.1186/s42400-024-00222-y7:1Online publication date: 1-Oct-2024
https://doi.org/10.1186/s42400-024-00222-y
Cebere BRossow C(2024)Understanding Web Fingerprinting with a Protocol-Centric ApproachProceedings of the 27th International Symposium on Research in Attacks, Intrusions and Defenses10.1145/3678890.3678910(17-34)Online publication date: 30-Sep-2024
https://dl.acm.org/doi/10.1145/3678890.3678910
Zhao XDeng XLi QLiu YLiu ZSun KXu KLuo BLiao XXu JKirda ELie D(2024)Towards Fine-Grained Webpage Fingerprinting at ScaleProceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security10.1145/3658644.3690211(423-436)Online publication date: 2-Dec-2024
https://dl.acm.org/doi/10.1145/3658644.3690211
Xie YFeng JHuang WZhang YSun XChen XLuo XChua TNgo CKa-Wei Lee RKumar RLauw H(2024)Contrastive Fingerprinting: A Novel Website Fingerprinting Attack over Few-shot TracesProceedings of the ACM Web Conference 202410.1145/3589334.3645575(1203-1214)Online publication date: 13-May-2024
https://dl.acm.org/doi/10.1145/3589334.3645575
Krämer PBaier BLanderer NDiederich PGriessel AHohlfeld OBlenk AMieth MKellerer W(2024)ProFi: Scalable and Efficient Website FingerprintingIEEE Transactions on Network and Service Management10.1109/TNSM.2023.331850821:1(1271-1286)Online publication date: Feb-2024
https://doi.org/10.1109/TNSM.2023.3318508
Zhou QWang LZhu HLu TSheng V(2024)WF-Transformer: Learning Temporal Features for Accurate Anonymous Traffic Identification by Using Transformer NetworksIEEE Transactions on Information Forensics and Security10.1109/TIFS.2023.331896619(30-43)Online publication date: 2024
https://doi.org/10.1109/TIFS.2023.3318966
Chao DXu DGao FZhang CZhang WZhu L(2024)A Systematic Survey on Security in Anonymity Networks: Vulnerabilities, Attacks, Defenses, and FormalizationIEEE Communications Surveys & Tutorials10.1109/COMST.2024.335000626:3(1775-1829)Online publication date: Nov-2025
https://doi.org/10.1109/COMST.2024.3350006
Hong XLi SMa XLiu BWu F(2024)A website fingerprinting technology with time-samplingPeer-to-Peer Networking and Applications10.1007/s12083-024-01646-617:2(944-960)Online publication date: 6-Feb-2024
https://doi.org/10.1007/s12083-024-01646-6
Shen MJi KGao ZLi QZhu LXu KCalandrino JTroncoso C(2023)Subverting website fingerprinting defenses with robust traffic representationProceedings of the 32nd USENIX Conference on Security Symposium10.5555/3620237.3620272(607-624)Online publication date: 9-Aug-2023
https://dl.acm.org/doi/10.5555/3620237.3620272
Wang YWang YHuang JChen Y(2023)TBP: Tree structure Burst-sequence Padding Defense Against Website Fingerprinting2023 IEEE International Performance, Computing, and Communications Conference (IPCCC)10.1109/IPCCC59175.2023.10253867(99-108)Online publication date: 17-Nov-2023
https://doi.org/10.1109/IPCCC59175.2023.10253867
Show More Cited By

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Media

Figures

Other

Tables

View Table of Contents