Statistical Identification of Encrypted Web Browsing Traffic. Sun, Q., Simon, D. R., Wang, Y., Russell, W., Padmanabhan, V. N., & Qiu, L. May 2002.
Statistical Identification of Encrypted Web Browsing Traffic [link]Paper  abstract   bibtex   
Encryption is often proposed as a tool for protecting the privacy of World Wide Web browsing.However, encryption–particularly astypically implemented in, or in concert with popular Webbrowsers–does not hide all information about the encryptedplaintext.Specifically, HTTP object count and sizes are oftenrevealed (or at least incompletely concealed). We investigate theidentifiability of World Wide Web traffic based on this unconcealedinformation in a large sample of Web pages, and show that it sufficesto identify a significant fraction of them quite reliably.We also suggest some possible countermeasures against the exposure of this kind of information and experimentally evaluate their effectiveness.
@conference {TrafHTTP,
	title = {Statistical Identification of Encrypted Web Browsing Traffic},
	booktitle = {Proceedings of the 2002 IEEE Symposium on Security and Privacy},
	year = {2002},
	month = {May},
	publisher = {IEEE Computer Society  Washington, DC, USA},
	organization = {IEEE Computer Society  Washington, DC, USA},
	address = {Berkeley, California},
	abstract = {Encryption is often proposed as a tool for protecting the privacy of World Wide Web browsing.However, encryption--particularly astypically implemented in, or in concert with popular Webbrowsers--does not hide all information about the encryptedplaintext.Specifically, HTTP object count and sizes are oftenrevealed (or at least incompletely concealed). We investigate theidentifiability of World Wide Web traffic based on this unconcealedinformation in a large sample of Web pages, and show that it sufficesto identify a significant fraction of them quite reliably.We also suggest some possible countermeasures against the exposure of this kind of information and experimentally evaluate their effectiveness.},
	keywords = {encryption, privacy},
	isbn = {0-7695-1543-6},
	url = {http://portal.acm.org/citation.cfm?id=830535},
	author = {Qixiang Sun and Daniel R. Simon and Yi-Min Wang and Wilf Russell and Venkata N. Padmanabhan and Lili Qiu}
}

Downloads: 0