{"id":"https://openalex.org/W2913901113","doi":"https://doi.org/10.2478/popets-2020-0043","title":"<i>Tik-Tok</i>: The Utility of Packet Timing in Website Fingerprinting Attacks","display_name":"<i>Tik-Tok</i>: The Utility of Packet Timing in Website Fingerprinting Attacks","publication_year":2020,"publication_date":"2020-07-01","ids":{"openalex":"https://openalex.org/W2913901113","doi":"https://doi.org/10.2478/popets-2020-0043","mag":"2913901113"},"language":"en","primary_location":{"id":"doi:10.2478/popets-2020-0043","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2020-0043","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.2478/popets-2020-0043","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Mohammad Saidur Rahman","orcid":null},"institutions":[{"id":"https://openalex.org/I4210143258","display_name":"SBS CyberSecurity (United States)","ror":"https://ror.org/0572r3k48","country_code":"US","type":"company","lineage":["https://openalex.org/I4210143258"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohammad Saidur Rahman","raw_affiliation_strings":["Global Cybersecurity Institute, RIT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Global Cybersecurity Institute, RIT","institution_ids":["https://openalex.org/I4210143258"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Payap Sirinam","orcid":null},"institutions":[{"id":"https://openalex.org/I279583474","display_name":"Navamindradhiraj University","ror":"https://ror.org/01qkghv97","country_code":"TH","type":"education","lineage":["https://openalex.org/I279583474"]},{"id":"https://openalex.org/I430641","display_name":"United States Air Force Academy","ror":"https://ror.org/0055d0g64","country_code":"US","type":"government","lineage":["https://openalex.org/I1330347796","https://openalex.org/I4210089612","https://openalex.org/I4210102105","https://openalex.org/I430641"]}],"countries":["TH","US"],"is_corresponding":false,"raw_author_name":"Payap Sirinam","raw_affiliation_strings":["Navaminda Kasatriyadhiraj Royal Air Force Academy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Navaminda Kasatriyadhiraj Royal Air Force Academy","institution_ids":["https://openalex.org/I279583474","https://openalex.org/I430641"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Nate Mathews","orcid":null},"institutions":[{"id":"https://openalex.org/I4210143258","display_name":"SBS CyberSecurity (United States)","ror":"https://ror.org/0572r3k48","country_code":"US","type":"company","lineage":["https://openalex.org/I4210143258"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nate Mathews","raw_affiliation_strings":["Global Cybersecurity Institute, RIT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Global Cybersecurity Institute, RIT","institution_ids":["https://openalex.org/I4210143258"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Kantha Girish Gangadhara","orcid":null},"institutions":[{"id":"https://openalex.org/I4210143258","display_name":"SBS CyberSecurity (United States)","ror":"https://ror.org/0572r3k48","country_code":"US","type":"company","lineage":["https://openalex.org/I4210143258"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kantha Girish Gangadhara","raw_affiliation_strings":["Global Cybersecurity Institute, RIT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Global Cybersecurity Institute, RIT","institution_ids":["https://openalex.org/I4210143258"]}]},{"author_position":"last","author":{"id":null,"display_name":"Matthew Wright","orcid":null},"institutions":[{"id":"https://openalex.org/I4210143258","display_name":"SBS CyberSecurity (United States)","ror":"https://ror.org/0572r3k48","country_code":"US","type":"company","lineage":["https://openalex.org/I4210143258"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Matthew Wright","raw_affiliation_strings":["Global Cybersecurity Institute, RIT"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Global Cybersecurity Institute, RIT","institution_ids":["https://openalex.org/I4210143258"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.3954,"has_fulltext":false,"cited_by_count":141,"citation_normalized_percentile":{"value":0.98084449,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"2020","issue":"3","first_page":"5","last_page":"24"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9593999981880188,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9593999981880188,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.004100000020116568,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.003800000064074993,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6065000295639038},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6043000221252441},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.49540001153945923},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.47099998593330383},{"id":"https://openalex.org/keywords/precision-and-recall","display_name":"Precision and recall","score":0.46950000524520874},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.40630000829696655},{"id":"https://openalex.org/keywords/information-gain","display_name":"Information gain","score":0.36899998784065247}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7059000134468079},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6065000295639038},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6043000221252441},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.49540001153945923},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.47099998593330383},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4697999954223633},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.46950000524520874},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.40630000829696655},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.40369999408721924},{"id":"https://openalex.org/C2983203078","wikidata":"https://www.wikidata.org/wiki/Q255166","display_name":"Information gain","level":2,"score":0.36899998784065247},{"id":"https://openalex.org/C28420585","wikidata":"https://www.wikidata.org/wiki/Q2665075","display_name":"Timing attack","level":4,"score":0.35499998927116394},{"id":"https://openalex.org/C93682380","wikidata":"https://www.wikidata.org/wiki/Q2025226","display_name":"Static timing analysis","level":2,"score":0.3269999921321869},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.2815000116825104},{"id":"https://openalex.org/C2989486834","wikidata":"https://www.wikidata.org/wiki/Q3808900","display_name":"True positive rate","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C92424840","wikidata":"https://www.wikidata.org/wiki/Q7912772","display_name":"Value of information","level":2,"score":0.26910001039505005},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.2547999918460846},{"id":"https://openalex.org/C2776291640","wikidata":"https://www.wikidata.org/wiki/Q2912517","display_name":"Value (mathematics)","level":2,"score":0.25429999828338623},{"id":"https://openalex.org/C91602232","wikidata":"https://www.wikidata.org/wiki/Q756115","display_name":"Volatility (finance)","level":2,"score":0.2535000145435333}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.2478/popets-2020-0043","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2020-0043","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:1902.06421","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1902.06421","pdf_url":"https://arxiv.org/pdf/1902.06421","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:doaj.org/article:ebc18c9958504cffa09758b52bce29bd","is_oa":false,"landing_page_url":"https://doaj.org/article/ebc18c9958504cffa09758b52bce29bd","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings on Privacy Enhancing Technologies, Vol 2020, Iss 3, Pp 5-24 (2020)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.2478/popets-2020-0043","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2020-0043","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W197026479","https://openalex.org/W1567366855","https://openalex.org/W1875604605","https://openalex.org/W1993568446","https://openalex.org/W2012210084","https://openalex.org/W2021949962","https://openalex.org/W2027177092","https://openalex.org/W2108217512","https://openalex.org/W2120702739","https://openalex.org/W2135579486","https://openalex.org/W2170085959","https://openalex.org/W2272516773","https://openalex.org/W2485000773","https://openalex.org/W2595840341","https://openalex.org/W2783301790","https://openalex.org/W2793024185","https://openalex.org/W2889182794","https://openalex.org/W2891651011","https://openalex.org/W2892381525","https://openalex.org/W2912675049","https://openalex.org/W2914630606","https://openalex.org/W2919115771","https://openalex.org/W2963704216","https://openalex.org/W2964123888","https://openalex.org/W2964602598","https://openalex.org/W2989013751","https://openalex.org/W2996061341","https://openalex.org/W4299930775","https://openalex.org/W4386874645"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"A":[1],"passive":[2],"local":[3],"eavesdropper":[4],"can":[5,54,232],"leverage":[6],"Website":[7],"Fingerprinting":[8],"(WF)":[9],"to":[10,24,34,50,57,74,87,228],"deanonymize":[11],"the":[12,35,48,93,128,169,190,219,235],"web":[13],"browsing":[14],"activity":[15],"of":[16,21,37,67,95,106,127,192,237],"Tor":[17,137],"users.":[18],"The":[19],"value":[20,191],"timing":[22,39,53,80,98,101,108,122,193,211],"information":[23,151,198,215,220],"WF":[25,59,114],"has":[26],"often":[27],"been":[28],"discounted":[29],"in":[30,111,125,135,168,175,222],"recent":[31],"works":[32],"due":[33],"volatility":[36],"low-level":[38],"information.":[40],"In":[41],"this":[42],"paper,":[43],"we":[44,91,130,195],"more":[45,77],"carefully":[46],"examine":[47],"extent":[49],"which":[51,102],"packet":[52],"be":[55,83],"used":[56,84],"facilitate":[58],"attacks.":[60],"We":[61],"first":[62],"propose":[63],"a":[64,104,112,238],"new":[65],"set":[66],"timing-related":[68],"features":[69,212],"based":[70],"on":[71,141,184,201],"burst-level":[72],"characteristics":[73],"further":[75,188],"identify":[76,88],"ways":[78],"that":[79,120,209],"patterns":[81],"could":[82],"by":[85],"classifiers":[86],"sites.":[89],"Then":[90],"evaluate":[92],"effectiveness":[94],"both":[96,176],"raw":[97,107],"and":[99,109,154,179,231],"directional":[100,121,150,217],"is":[103,152,225],"combination":[105],"direction":[110],"deep-learning-based":[113],"attack.":[115],"Our":[116,206],"closed-world":[117],"evaluation":[118],"shows":[119],"performs":[123],"best":[124],"most":[126],"settings":[129],"explored,":[131],"achieving:":[132],"(i)":[133],"98.4%":[134],"undefended":[136],"traffic;":[138],"(ii)":[139],"93.5%":[140],"WTF-PAD":[142,185],"traffic,":[143],"several":[144],"points":[145],"higher":[146,161],"than":[147,162,216],"when":[148],"only":[149,164],"used;":[153],"(iii)":[155],"64.7%":[156],"against":[157],"onion":[158],"sites,":[159],"12%":[160],"using":[163],"direction.":[165],"Further":[166],"evaluations":[167],"open-world":[170],"setting":[171],"show":[172,208],"small":[173],"increases":[174],"precision":[177],"(+2%)":[178],"recall":[180],"(+6%)":[181],"with":[182],"directional-timing":[183],"traffic.":[186],"To":[187],"investigate":[189],"information,":[194],"perform":[196],"an":[197],"leakage":[199],"analysis":[200],"our":[202],"proposed":[203],"handcrafted":[204],"features.":[205],"results":[207],"while":[210],"leak":[213],"less":[214],"features,":[218],"contained":[221],"each":[223],"feature":[224],"mutually":[226],"exclusive":[227],"one":[229],"another":[230],"thus":[233],"improve":[234],"robustness":[236],"classifier.":[239]},"counts_by_year":[{"year":2026,"cited_by_count":14},{"year":2025,"cited_by_count":38},{"year":2024,"cited_by_count":27},{"year":2023,"cited_by_count":36},{"year":2022,"cited_by_count":17},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2019-02-21T00:00:00"}