TY - CHAP A1 - Panchenko, Andriy A1 - Lanze, Fabian A1 - Zinnen, Andreas A1 - Henze, Martin A1 - Pennekamp, Jan A1 - Engel, Thomas A1 - Wehrle, Klaus T1 - Website Fingerprinting at Internet Scale T2 - Proceedings of the 23rd Internet Society (ISOC) Network and Distributed System Security Symposium (NDSS 2016), San Diego, USA, February 2016 Y1 - 2016 SN - 1-891562-41-X PB - Internet Society CY - Reston, VA ER - TY - GEN A1 - Mitseva, Asya A1 - Panchenko, Andriy A1 - Lanze, Fabian A1 - Henze, Martin A1 - Engel, Thomas A1 - Wehrle, Klaus T1 - POSTER: Fingerprinting Tor Hidden Services T2 - In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS '16). Association for Computing Machinery, New York, NY, USA Y1 - 2016 SN - 978-1-4503-4139-4 U6 - https://doi.org/10.1145/2976749.2989054 SP - 1766 EP - 1768 PB - ACM CY - New York ER - TY - CHAP A1 - Panchenko, Andriy A1 - Mitseva, Asya A1 - Henze, Martin A1 - Lanze, Fabian A1 - Engel, Thomas A1 - Wehrle, Klaus T1 - Analysis of Fingerprinting Techniques for Tor Hidden Services T2 - WPES '17 Proceedings of the 2017 on Workshop on Privacy in the Electronic Society, Dallas, Texas, USA, October 2017 Y1 - 2017 SN - 978-1-4503-5175-1 U6 - https://doi.org/10.1145/3139550.3139564 SP - 165 EP - 175 PB - ACM CY - New York, NY ER - TY - GEN A1 - Pennekamp, Jan A1 - Hiller, Jens A1 - Reuter, Sebastian A1 - De la Cadena, Wladimir A1 - Mitseva, Asya A1 - Henze, Martin A1 - Engel, Thomas A1 - Wehrle, Klaus A1 - Panchenko, Andriy T1 - Multipathing Traffic to Reduce Entry Node Exposure in Onion Routing T2 - Proceedings of the 27th annual IEEE International Conference on Network Protocols (Poster) (IEEE ICNP 2019), Chicago, Illinois, USA, October 2019 N2 - Users of an onion routing network, such as Tor, depend on its anonymity properties. However, especially malicious entry nodes, which know the client’s identity, can also observe the whole communication on their link to the client and, thus, conduct several de-anonymization attacks. To limit this exposure and to impede corresponding attacks, we propose to multipath traffic between the client and the middle node to reduce the information an attacker can obtain at a single vantage point. To facilitate the deployment, only clients and selected middle nodes need to implement our approach, which works transparently for the remaining legacy nodes. Furthermore, we let clients control the splitting strategy to prevent any external manipulation. Y1 - 2019 UR - https://ieeexplore.ieee.org/document/8888029 SN - 978-1-7281-2700-2 SN - 978-1-7281-2701-9 U6 - https://doi.org/10.1109/ICNP.2019.8888029 SN - 2643-3303 SN - 1092-1648 PB - IEEE Press ER - TY - GEN A1 - Hiller, Jens A1 - Pennekamp, Jan A1 - Dahlmanns, Markus A1 - Henze, Martin A1 - Panchenko, Andriy A1 - Wehrle, Klaus T1 - Tailoring Onion Routing to the Internet of Things: Security and Privacy in Untrusted Environments T2 - Proceedings of the 27th annual IEEE International Conference on Network Protocols (IEEE ICNP 2019), Chicago, Illinois, USA, October 2019 N2 - An increasing number of IoT scenarios involve mobile, resource-constrained IoT devices that rely on untrusted networks for Internet connectivity. In such environments, attackers can derive sensitive private information of IoT device owners, e.g., daily routines or secret supply chain procedures, when sniffing on IoT communication and linking IoT devices and owner. Furthermore, untrusted networks do not provide IoT devices with any protection against attacks from the Internet. Anonymous communication using onion routing provides a well-proven mechanism to keep the relationship between communication partners secret and (optionally) protect against network attacks. However, the application of onion routing is challenged by protocol incompatibilities and demanding cryptographic processing on constrained IoT devices, rendering its use infeasible. To close this gap, we tailor onion routing to the IoT by bridging protocol incompatibilities and offloading expensive cryptographic processing to a router or web server of the IoT device owner. Thus, we realize resource-conserving access control and end-toend security for IoT devices. To prove applicability, we deploy onion routing for the IoT within the well-established Tor network enabling IoT devices to leverage its resources to achieve the same grade of anonymity as readily available to traditional devices. KW - Routing, Internet of Things, Protocols, Cryptography, Servers Y1 - 2019 UR - https://ieeexplore.ieee.org/document/8888033 SN - 978-1-7281-2700-2 SN - 978-1-7281-2701-9 U6 - https://doi.org/10.1109/ICNP.2019.8888033 SN - 2643-3303 SN - 1092-1648 PB - IEEE Press ER - TY - GEN A1 - Pennekamp, Jan A1 - Henze, Martin A1 - Hohlfeld, Oliver A1 - Panchenko, Andriy T1 - Hi Doppelgänger: Towards Detecting Manipulation in News Comments T2 - Companion Proceedings of the 2019 World Wide Web Conference (WWW '19 Companion), 4th Workshop on Computational Methods in Online Misbehavior (CyberSafety '19), May 13–17, 2019, San Francisco, CA, USA Y1 - 2019 SN - 978-1-4503-6675-5 U6 - https://doi.org/10.1145/3308560.3316496 SP - 197 EP - 205 PB - ACM CY - New York ER - TY - GEN A1 - Hiller, Jens A1 - Henze, Martin A1 - Zimmermann, Torsten A1 - Hohlfeld, Oliver A1 - Wehrle, Klaus T1 - The Case for Session Sharing: Relieving Clients from TLS Handshake Overheads T2 - 2019 IEEE 44th LCN Symposium on Emerging Topics in Networking (LCN Symposium), 14-17 Oct. 2019, Osnabrück, Germany N2 - In recent years, the amount of traffic protected with Transport Layer Security (TLS) has significantly increased and new protocols such as HTTP/2 and QUIC further foster this emerging trend. However, protecting traffic with TLS has significant impacts on network entities. While the restrictions for middleboxes have been extensively studied, addressing the impact of TLS on clients and servers has been mostly neglected so far. Especially mobile clients in emerging 5G and IoT deployments suffer from significantly increased latency, traffic, and energy overheads when protecting traffic with TLS. In this paper, we address this emerging topic by thoroughly analyzing the impact of TLS on clients and servers and derive opportunities for significantly decreasing latency of TLS communication and downsizing TLS management traffic, thereby also reducing TLSinduced server load. We propose a protocol compatible redesign of TLS session management to use these opportunities and showcase their potential based on mobile device traffic and mobile web-browsing traces. These show promising potentials for latency improvements by up to 25.8% and energy savings of up to 26.3%. KW - TLS Performance, Efficient Secure Communication, TLS Session Resumption, Network Security, Security and Privacy, Mobile Networking, 5G and IoT Y1 - 2019 UR - https://ieeexplore.ieee.org/document/9000667 SN - 978-1-7281-2561-9 SN - 978-1-7281-2562-6 U6 - https://doi.org/10.1109/LCNSymposium47956.2019.9000667 PB - IEEE ER - TY - GEN A1 - Pennekamp, Jan A1 - Henze, Martin A1 - Zinnen, Andreas A1 - Lanze, Fabian A1 - Wehrle, Klaus A1 - Panchenko, Andriy T1 - CUMUL & Co: High-Impact Artifacts for Website Fingerprinting Research T2 - 38th Annual Computer Security Applications Conference (ACSAC 2022), Austin, Texas, USA, December 5-9, 2022. N2 - Anonymous communication on the Internet is about hiding the relationship between communicating parties. At NDSS ’16, we presented a new website fingerprinting approach, CUMUL, that utilizes novel features and a simple yet powerful algorithm to attack anonymization networks such as Tor. Based on pattern observation of data flows, this attack aims at identifying the content of encrypted and anonymized connections. Apart from the feature generation and the used classifier, we also provided a large dataset to the research community to study the attack at Internet scale. In this paper, we emphasize the impact of our artifacts by analyzing publications referring to our work with respect to the dataset, feature extraction method, and source code of the implementation. Based on this data, we draw conclusions about the impact of our artifacts on the research field and discuss their influence on related cybersecurity topics. Overall, from 393 unique citations, we discover more than 130 academic references that utilize our artifacts, 61 among them are highly influential (according to SemanticScholar), and at least 43 are from top-ranked security venues. This data underlines the significant relevance and impact of our work as well as of our artifacts in the community and beyond. KW - Traffic Analysis;Website Fingerprinting; Privacy; Anonymous Communication; Onion Routing; Web Privacy Y1 - 2022 UR - https://www.acsac.org/2022/program/artifacts_competition/ ER -