1

Given a set of traces coming from different websites, where each trace is a packet. Assume we only know the time of arrival, size and direction of each packet. How do we go about fingerprinting these traces to a particular website?

I am looking for how to derive a fingerprint for a website based on only the three pieces of information provided (i.e. time of arrival, size and direction of packet traces). And then potentially match these traces if they have the same fingerprint.

4
  • Hi, I'm a bit confused. Is there anything specific you're looking for or the question is to explain in general how a website fingerprinting works?
    – user284677
    Commented Nov 2, 2022 at 6:18
  • Apologies for the confusion. I am looking for how to derive a fingerprint for a website based on only the three information provided (i.e. time of arrival, size and direction of packet traces). And then potentially match these traces if they have the same fingerprint.
    – Goonturr
    Commented Nov 2, 2022 at 6:42
  • 1
    Have you taken a look at the relevant research? (e.g. link.springer.com/content/pdf/10.1007/978-3-642-15497-3_13.pdf, pages.cs.wisc.edu/~salinisk/642/… and infolab.stanford.edu/~qsun/research/identification.pdf)
    – user284677
    Commented Nov 2, 2022 at 6:56
  • Will simply comparing size of packets and direction give a reasonable match between fingerprints? For example, based on a set of traces from two URLs, compare the number of exact matches in packet size/direction. If the number of matches are reasonably high, then we can infer that both traces are from the same URL?
    – Goonturr
    Commented Nov 2, 2022 at 12:49

1 Answer 1

0

Question is too vague and generic, title is about website fingerprinting (which is L7 concept), but you talk about network packets, which are L3-L4 concept.

Because of that it is impossible, you either need to do L4 fingerprinting (TCP/IP stack fingerprinting) or L7 fingerprinting (SSL JA3 fingerprinting, or HTML5 Canvas fingerprinting)

1

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .