Opened 7 years ago

Last modified 13 months ago

#7027 new enhancement

Defend against Website Traffic Fingerprinting

Reported by: mikeperry Owned by:
Priority: High Milestone: Tor: unspecified
Component: Core Tor/Tor Version:
Severity: Normal Keywords: SponsorZ-large tor-client traffic-analysis research-program
Cc: g.koppen@… Actual Points:
Parent ID: Points: parent
Reviewer: Sponsor:

Description

We should defend against Website Traffic Fingerprinting. I hear it's like a serious attack that is super dangerous because of its "devastating accuracy" of around 80% in closed-world research scenarios. I also hear that IDS/IPS systems are the new new hotness, and soon we'll all be defended by 99.9% accurate IPS firewalls that will keep us safe from hackers forever. Look everybody, the 1990s are back in style again. Let's all move to Portland and retire.

But hey, there's no reason why we shouldn't work to improve the situation. Turns out there's a few bonus reasons to work on this problem... Who knew?

See child tickets for possible approaches, as well as things we've already tried.

Child Tickets

TicketTypeStatusOwnerSummary
#3914enhancementclosedmikeperryExperimental website traffic fingerprinting defense
#5282defectclosedmikeperryRandomize non-pipelined requests to defend against traffic fingerprinting
#6932enhancementnewtbb-teamImplement some HTTPOS features in TBB
#7028projectclosedImplement Adaptive Padding or some variant and measure overhead vs accuracy

Change History (4)

comment:1 Changed 7 years ago by gk

Cc: g.koppen@… added

comment:2 Changed 7 years ago by nickm

Keywords: tor-client added
Milestone: Tor: unspecified

comment:3 Changed 2 years ago by nickm

Keywords: traffic-analysis research-program added
Points: parent
Severity: Normal

comment:4 Changed 13 months ago by indigotime

Probably, something like this addon https://addons.mozilla.org/en-US/firefox/addon/mystique-ff/ will help to defend against traffic fingerprinting...

Note: See TracTickets for help on using tickets.