Private communication detection: a stochastic approach

  • Authors:
  • Chang-Han Jong;Virgil D. Gligor

  • Affiliations:
  • University of Maryland, College Park, College Park, MD, USA;Carnegie Mellon University, Pittsburgh, PA, USA

  • Venue:
  • Proceedings of the fifth ACM conference on Security and Privacy in Wireless and Mobile Networks
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

Private communication detection (PCD) enables an ordinary network user to discover communication patterns (e.g., call time, length, frequency, and initiator) between two or more private parties. Ordinary users have neither eavesdropping capabilities (e.g., the network may employ strong anonymity measures) nor legal authority (e.g., collection of call records---without any voice/data content---requires "national security letters") to collect private-communication records. Analysis of communication patterns between private parties has historically been a powerful tool used by intelligence, military, law-enforcement and business organizations as it can reveal the strength of tie between these parties. In this paper, we show that PCD is possible by ordinary users merely by sending packets to various network end-nodes (e.g., WiFi nodes) and analyzing the timing of their responses. We show that timing side channels, which are caused by distinct resource-contention responses when different applications run in end nodes, enable effective PCD despite network and proxy-generated noise (e.g., jitter, delays). We use a stochastic analysis to demonstrate how PCD exploits indirectly accessible, remote end-node resources, such as WiFi radio channels and computer keyboards in Instant Messaging. Similar analysis enables practical Sybil node detection.