[4605] in Privacy_Forum
[ PRIVACY Forum ] I Know Why You Went to the Clinic: Risks and
daemon@ATHENA.MIT.EDU (PRIVACY Forum mailing list)
Fri Mar 7 16:24:27 2014
Date: Fri, 7 Mar 2014 12:51:50 -0800
To: privacy-list@vortex.com
Message-ID: <20140307205150.GB4459@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: PRIVACY Forum mailing list <privacy@vortex.com>
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
I Know Why You Went to the Clinic: Risks and Realization of HTTPS Traffic Analysis
http://j.mp/1k0QAOb (ARXIV)
"Abstract. Revelations of large scale electronic surveillance and
data mining by governments and corporations have fueled increased
adoption of HTTPS. We present a traffic analysis attack against
over 6000 webpages spanning the HTTPS deployments of 10 widely
used, industry-leading websites in areas such as healthcare,
insurance, legal services and streaming video. Our attack identifies
individual pages in the same website with 89% accuracy,
exposing personal details including medical conditions, financial
and legal affairs and sexual orientation. We examine evaluation
methodology and reveal accuracy variations as large as 18% caused
by assumptions affecting caching and cookies. We present a novel
defense reducing attack accuracy to 27% with a 9% traffic increase,
and demonstrate signicantly increased effectiveness of prior
defenses in our evaluation context, inclusive of enabled caching,
user-specific cookies and pages within the same website."
- - -
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
