the attacker creates a profile of the website, also known as a fingerprint. Using information captured such as the length of the packet, the time sent and received, etc.These packets are known as training instances The attacker uses a traffic analyzer tool (for example, tcpdump) to capture packet traces of IP layer packets. The attacker first listens to and records packet traces from several websites that may be possible websites that the user visits.

The general procedure of website fingerprinting is as follows: The goal of a fingerprinting attack is to deanonymize a user and figure out the website that they are visiting, even if the have anonymous routing and encryption of data. A website fingerprinting attack is one way in which to compromise the anonymity provided by Tor, by matching users and the websites that they visit. When someone uses Tor, an eavesdropper on the same network as the user cannot identify the websites that they are visiting by looking at IP packet headers. If you're not sure if you have those skills, you may want to try Lab Zero first. You should have already uploaded your SSH keys to the portal and know how to log in to a node with those keys. To reproduce this experiment on GENI, you will need an account on the GENI Portal, and you will need to have joined a project.

This experiment will take approximately 30 minutes to setup, and another 30 minutes to test the network. Using the traffic that we see, we will create another fingerprint, and will compare it with our website fingerprints to see if we can find a correlation with the site that the client visited. After that is complete, we will have the client randomly choose one of the five sites, while we listen on the client's network. We will be getting the homepages of five different sites onto our webserver, and from there will be creating fingerprints of each site. In this experiment, we will be setting up a private Tor network on GENI, and will be testing a website fingerprinting attack on the network.

Menu De-anonymizing Tor traffic with website fingerprinting Takuya Fukui

Tor onion website list