TSA: a tool to detect and quantify network side-channels

TSA: a tool to detect and quantify network side-channels
复制标题

TSA:检测和量化网络旁路的工具

DOI:
10.1145/3540250.3558938
复制
发表时间:
2022
期刊:
ESEC/FSE 2022: Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering
影响因子:
--
通讯作者:
Bultan, Tevfik
Bultan, Tevfik
中科院分区:
--
文献类型:
--
作者:
Kadron, İsmet Burak;Bultan, Tevfik

文献摘要

参考文献

被引文献

相似文献

移动应用程序、物联网设备和网络服务无处不在,它们都对服务器和客户端之间的通信进行加密,以免信息泄露。虽然网络流量已加密,但窃听者仍然可以看到数据包大小和时间安排,这些属性可能会泄露信息并牺牲用户隐私。我们推出了 TSA,一种黑盒网络旁路分析工具,可检测和量化旁路信息泄漏。 TSA 通过提供一个框架,为用户提供自动化跟踪收集的方法,用户可以在该框架中为正在分析的系统的输入编写变异器。如果用户喜欢单独收集痕迹,TSA 还可以直接将其作为输入痕迹进行分析。 TSA 是开源的,可作为 Python 包和命令行工具使用。 TSA 演示、工具和基准可在 https://github.com/kadron/tsa-tool 上获取。
Mobile applications, Internet of Things devices and web services are pervasive and they all encrypt the communications between servers and clients to not have information leakages. While the network traffic is encrypted, packet sizes and timings are still visible to an eavesdropper and these properties can leak information and sacrifice user privacy. We present TSA, a black box network side-channel analysis tool which detects and quantifies side-channel information leakages. TSA provides the users with the means to automate trace gathering by providing a framework in which the users can write mutators for the inputs to the system under analysis. TSA can also take as input traces directly for analysis if the user prefers to gather them separately. TSA is open-source and available as a Python package and a command-line tool. TSA demo, tool and benchmarks are available at https://github.com/kadron/tsa-tool.
测量网站指纹攻击和防御中的信息泄漏
DOI: 10.1145/3243734.3243832
发表时间: 2018
期刊: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security
影响因子: --
作者:
Li, Shuai;Guo, Huajun;Hopper, Nicholas
通讯作者: Hopper, Nicholas
F-BLEAU:快速黑盒泄漏估计
DOI: 10.1109/sp.2019.00073
发表时间: 2019
期刊: 2019 IEEE Symposium on Security and Privacy (SP)
影响因子: --
作者:
Giovanni Cherubin;K. Chatzikokolakis;C. Palamidessi
通讯作者: C. Palamidessi