Measuring the Impact of HTTP / 2 and Server Push on Web Fingerprinting
Measuring the Impact of HTTP / 2 and Server Push on Web Fingerprinting
复制标题
测量 HTTP/2 和服务器推送对 Web 指纹识别的影响
DOI：
--
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
N. Borisov
中科院分区：
文献类型：
--
作者：
Weiran Lin;S. Reddy;N. Borisov
传输层和链路层加密机制的部署不断增加，有助于保护用户的安全。然而，由于网络流量中存在的模式，隐私攻击仍然是可能的。特别是网络指纹，可以揭示某人访问的网站或页面，尽管加密。在本文中，我们着手研究新的Web标准，特别是HTTP/2和服务器推送，对对手执行Web指纹识别的能力有什么影响，因为这些技术显着改变网络流量模式。我们创建了顶级Alexa网站的网页模型，这些网站捕获了网站上资源的依赖结构。然后，我们捕获了使用HTTP/1.1和HTTP/2与服务器推送加载这些模型的网络跟踪，并评估了它们对最先进的Web指纹攻击的敏感性。我们的研究结果表明，HTTP/2比HTTP/1.1为对手提供了更小的指纹表面。此外，它还允许一个简单的填充方案，可以进一步降低Web指纹识别的成功率。该方案与其他最先进的防御方法相比具有竞争力，并且仅带来少量的带宽开销。
The growing deployment of transportand linklayer encryption mechanisms helps to protect users’ security. However, privacy attacks are still possible due to patterns present in the network traffic. Web fingerprinting, in particular, can reveal what web site or page someone is visiting despite encryption. In this paper, we set out to study what impact new web standards—in particular, HTTP/2 and Server Push—have on the ability of adversaries to perform web fingerprinting, as these technologies significantly change network traffic patterns. We created web page models of top Alexa sites that captured the dependency structure of the resources on the site. We then captured network traces loading these models using both HTTP/1.1 and HTTP/2 with Server Push, and evaluated their susceptibility to state-of-the-art web fingerprinting attacks. Our results show that HTTP/2 presents a smaller fingerprinting surface for an adversary than HTTP/1.1. Additionally, it admits a simple padding scheme that can further reduce web fingerprinting success. This scheme is competitive with other state-ofthe-art defenses, and only presents a small amount of bandwidth overhead.