Active traffic analysis attacks and countermeasures Conference Paper uri icon

abstract

  • 2003 IEEE. To explore mission-critical information, an adversary using active traffic analysis attacks injects probing traffic into the victim network and analyzes the status of underlying payload traffic. Active traffic analysis attacks are easy to deploy and hence become a serious threat to mission critical applications. This paper suggests statistical pattern recognition as a fundamental technology to evaluate effectiveness of active traffic analysis attacks and corresponding countermeasures. Our evaluation shows that sample entropy of ping packets' round trip time is an effective feature statistic to discover the payload traffic rate. We propose simple countermeasures that can significantly reduce the effectiveness of ping-based active traffic analysis attacks. Our experiments validate the effectiveness of this scheme, which can also be used in other scenarios.

name of conference

  • 2003 International Conference on Computer Networks and Mobile Computing, 2003. ICCNMC 2003.

published proceedings

  • 2003 INTERNATIONAL CONFERENCE ON COMPUTER NETWORKS AND MOBILE COMPUTING, PROCEEDINGS

altmetric score

  • 3

author list (cited authors)

  • Fu, X. W., Graham, B., Bettati, R., & Zhao, W.

citation count

  • 0

complete list of authors

  • Fu, XW||Graham, B||Bettati, R||Zhao, W

publication date

  • January 2003