.png){kind=icon}
返回
Machine learning interpretability meets TLS fingerprinting
.png){kind=icon}
PRE
AI
DOI：10.1007/s00500-023-07949-9.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Protecting users' privacy over the Internet is of great importance; however, it becomes harder and harder to maintain due to the increasing complexity of network protocols and components. Therefore, investigating and understanding how data are leaked from the information transmission platforms and protocols can lead us to a more secure environment. In this paper, we propose a framework to systematically find the most vulnerable information fields in a network protocol. To this end, focusing on the transport layer security (TLS) protocol, we perform different machine-learning-based fingerprinting attacks on the collected data from more than 70 domains (websites) to understand how and where this information leakage occurs in the TLS protocol. Then, by employing the interpretation techniques developed in the machine learning community and applying our framework, we find the most vulnerable information fields in the TLS protocol. Our findings demonstrate that the TLS handshake (which is mainly unencrypted), the TLS record length appearing in the TLS application data header, and the IV field are among the most critical leaker parts in this protocol, respectively.
Keyword:
Web fingerprinting
Transport layer security (TLS)
Information leakage
Deep learning
Model interpretation
期刊
IF:
2.5
论文数:
1.0W
被引数:
2.1W
机构
引用论文
Interpretable machine learning: Fundamental principles and 10 grand challenges可解释的机器学习: 基本原则和十大挑战.png)
STATISTICS SURVEYS
OAAI
STATISTICS SURVEYSIF15.4
OAAI分享收藏
查看更多内容