MetaCart Sign in to MyCiteSeerX

Include Citations | Advanced Search | Help

Disambiguated Search | Include Citations | Advanced Search | Help

Traffic Analysis of SSL Encrypted Web Browsing (1998)

by Heyning Cheng And ,  Heyning Cheng ,  Ron Avnur
Add To MetaCart

Abstract:

The SSL protocol, an application-layer mechanism widely used for encrypted Web browsing, was not designed to address traffic analysis attacks. We investigate the threat to privacy posed by such attacks and consider possible defenses. We implement a prototype of a traffic analysis attack and employ it to identify the pages visited by users browsing a Web site. Numerical models and simulations are used to predict the effectiveness of traffic analysis on various sites, as well as the efficacy of several possible defenses. Our results show that an attack using simple techniques can identify the pages visited with very high accuracy, and suggest that defenses exist which may provide some degree of privacy protection in many cases. 1.

Citations

569 An introduction to hidden markov models – Rabiner, Juang - 1986
68 Privacy-enhancing technologies for the Internet – Goldberg, Wagner, et al. - 1997
60 Analysis of the SSL 3.0 protocol – Schneier, Wagner - 1996