Tango or square dance?

Davidson, Alex; Frei, Matthias; Gartner, Marten; Haddadi, Hamed; Nieto, Jordi Subirà; Perrig, Adrian; Winter, Philipp; Wirz, François

doi:10.1145/3563766.3564111

Cited by 2 publications

(1 citation statement)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Application-aware defenses challenges & Next steps. Effective mitigations require application involvement, either in the application code or as part of the browser's functionalities [27]. While defenses with application-layer involvement can obtain better protection at a smaller cost, our investigation shows that current use of third parties hinder the effective deployment of any defense as effectiveness requires all resources to be padded (see subsection 5.2).…”

Section: Discussion and Recommendationsmentioning

confidence: 88%

Evaluating practical QUIC website fingerprinting defenses for the masses

Siby

Barman

Wood³

et al. 2023

PoPETs

View full text Add to dashboard Cite

Website fingerprinting (WF) is a well-known threat to users' web privacy. New Internet standards, such as QUIC, include padding to support defenses against WF. Previous work on QUIC WF only analyzes the effectiveness of defenses when users are behind a VPN. Yet, this is not how most users browse the Internet. In this paper, we provide a comprehensive evaluation of QUIC-padding-based defenses against WF when users directly browse the web, i.e., without VPNs, HTTPS proxies, or other tunneling protocols. We confirm previous claims that network-layer padding cannot provide effective protection against powerful adversaries capable of observing all traffic traces. We show that the claims hold even against adversaries with constraints on traffic visibility and processing power. We then show that the current approach to web development, in which the use of third-party resources is the norm, impedes the effective use of padding-based defenses as it requires first and third parties to coordinate in order to thwart traffic analysis. We show that even when coordination is possible, in most cases, protection comes at a high cost.

show abstract

Section: Discussion and Recommendationsmentioning

confidence: 88%