Active Traffic Analysis Attacks and Countermeasures

  • Authors:
  • Xinwen Fu;Bryan Graham;Riccardo Bettati;Wei Zhao

  • Affiliations:
  • -;-;-;-

  • Venue:
  • ICCNMC '03 Proceedings of the 2003 International Conference on Computer Networks and Mobile Computing
  • Year:
  • 2003

Quantified Score

Hi-index 0.00

Visualization

Abstract

To explore mission-critical information, an adversary using active traffic analysis attacks injects probing traffic into the victim network and analyzes the status of underlying payload traffic. Active traffic analysis attacks are easy to deploy and hence become a serious threat to mission critical applications. This paper suggests statistical pattern recognition as a fundamental technology to evaluate effectiveness of active traffic analysis attacks and corresponding countermeasures. Our evaluation shows that sample entropy of ping packets' round trip time is an effective feature statistic to discover the payload traffic rate. We proposesimple countermeasures that can significantly reduce the effectiveness of ping-based active traffic analysis attacks. Our experiments validate the effectiveness of this scheme, whichcan also be used in other scenarios.