Analytical and empirical analysis of countermeasures to traffic analysis attacks
Authors:
- W. ZhaoWZW. Zhao
- D. XuanDXD. Xuan
- 1 January 2003
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- No. 01903918,p. 483-492
Abstract
We study countermeasures to traffic analysis attacks. A common strategy for such countermeasures is link padding. We consider systems where payload traffic is padded so that packets have either constant inter-arrival times or variable inter-arrival times. The adversary applies statistical recognition techniques to detect the payload traffic rates by using statistical measures like sample mean, sample variance, or sample entropy. We evaluate quantitatively the ability of the adversary to make a correct detection and derive closed-form formulas for the detection rate based on analytical models. Extensive experiments were carried out to validate the system performance predicted by the analytical method. Based on the systematic evaluations, we develop design guidelines for the proper configuration of a system in order to minimize the detection rateKeywords
This publication has 14 references indexed in Scilit:
- Statistical identification of encrypted Web browsing traffic2005
- On countermeasures to traffic analysis attacks2004
- Resource management of the OS network subsystem2003
- Performance analysis of a method for high level prevention of traffic analysis2003
- High level prevention of traffic analysis2002
- NetCamo: camouflaging network traffic for QoS-guaranteed mission critical applicationsIEEE Transactions on Systems, Man, and Cybernetics - Part A: Systems and Humans, 2001
- On estimation of entropy and mutual information of continuous distributionsSignal Processing, 1989
- Density Estimation for Statistics and Data Analysis1986
- Untraceable electronic mail, return addresses, and digital pseudonymsCommunications of the ACM, 1981
- Communication Theory of Secrecy Systems*Bell System Technical Journal, 1949