{"id":"https://openalex.org/W3130845370","doi":"https://doi.org/10.2478/popets-2021-0078","title":"Domain name encryption is not enough: privacy leakage via IP-based website fingerprinting","display_name":"Domain name encryption is not enough: privacy leakage via IP-based website fingerprinting","publication_year":2021,"publication_date":"2021-07-23","ids":{"openalex":"https://openalex.org/W3130845370","doi":"https://doi.org/10.2478/popets-2021-0078","mag":"3130845370"},"language":"en","primary_location":{"id":"doi:10.2478/popets-2021-0078","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2021-0078","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.2478/popets-2021-0078","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011924698","display_name":"Nguyen Phong Hoang","orcid":"https://orcid.org/0000-0002-9868-3318"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nguyen Phong Hoang","raw_affiliation_strings":["Stony Brook University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088105701","display_name":"Arian Akhavan Niaki","orcid":"https://orcid.org/0000-0002-4050-7012"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arian Akhavan Niaki","raw_affiliation_strings":["University of Massachusetts -Amherst","University of Massachusetts, Amherst"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts -Amherst","institution_ids":["https://openalex.org/I24603500"]},{"raw_affiliation_string":"University of Massachusetts, Amherst","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071387474","display_name":"Phillipa Gill","orcid":"https://orcid.org/0000-0003-4286-3018"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Phillipa Gill","raw_affiliation_strings":["University of Massachusetts - Amherst","University of Massachusetts, Amherst"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts - Amherst","institution_ids":["https://openalex.org/I24603500"]},{"raw_affiliation_string":"University of Massachusetts, Amherst","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007101727","display_name":"Michalis Polychronakis","orcid":"https://orcid.org/0000-0002-3106-0343"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michalis Polychronakis","raw_affiliation_strings":["Stony Brook University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University","institution_ids":["https://openalex.org/I59553526"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.1303,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.54445016,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"2021","issue":"4","first_page":"420","last_page":"440"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7071594595909119},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6979232430458069},{"id":"https://openalex.org/keywords/domain-name","display_name":"Domain name","score":0.6923540234565735},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6223948001861572},{"id":"https://openalex.org/keywords/ip-address","display_name":"Ip address","score":0.5636153221130371},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.546741247177124},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5284411907196045},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.4803253710269928},{"id":"https://openalex.org/keywords/domain-name-system","display_name":"Domain Name System","score":0.47844603657722473},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4462076723575592},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.42687657475471497},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.39800673723220825},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3943547010421753},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.37122076749801636}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7071594595909119},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6979232430458069},{"id":"https://openalex.org/C2988987868","wikidata":"https://www.wikidata.org/wiki/Q32635","display_name":"Domain name","level":3,"score":0.6923540234565735},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6223948001861572},{"id":"https://openalex.org/C2985371682","wikidata":"https://www.wikidata.org/wiki/Q11135","display_name":"Ip address","level":2,"score":0.5636153221130371},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.546741247177124},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5284411907196045},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.4803253710269928},{"id":"https://openalex.org/C35026560","wikidata":"https://www.wikidata.org/wiki/Q8767","display_name":"Domain Name System","level":3,"score":0.47844603657722473},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4462076723575592},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.42687657475471497},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.39800673723220825},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3943547010421753},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.37122076749801636},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.2478/popets-2021-0078","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2021-0078","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2102.08332","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2102.08332","pdf_url":"https://arxiv.org/pdf/2102.08332","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:3130845370","is_oa":true,"landing_page_url":"https://aps.arxiv.org/pdf/2102.08332","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2102.08332","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2102.08332","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.2478/popets-2021-0078","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2021-0078","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":96,"referenced_works":["https://openalex.org/W184773994","https://openalex.org/W189766157","https://openalex.org/W197026479","https://openalex.org/W1409124109","https://openalex.org/W1421675253","https://openalex.org/W1489608363","https://openalex.org/W1502492243","https://openalex.org/W1560629497","https://openalex.org/W1579055129","https://openalex.org/W1593043209","https://openalex.org/W1600184236","https://openalex.org/W1637101047","https://openalex.org/W1866884617","https://openalex.org/W1887796531","https://openalex.org/W1916902331","https://openalex.org/W1984816986","https://openalex.org/W1989763988","https://openalex.org/W1996201018","https://openalex.org/W2008524185","https://openalex.org/W2012210084","https://openalex.org/W2022816339","https://openalex.org/W2041404167","https://openalex.org/W2088565190","https://openalex.org/W2101678831","https://openalex.org/W2108217512","https://openalex.org/W2120702739","https://openalex.org/W2127218421","https://openalex.org/W2135088779","https://openalex.org/W2135579486","https://openalex.org/W2149280729","https://openalex.org/W2150593711","https://openalex.org/W2170085959","https://openalex.org/W2232992392","https://openalex.org/W2272516773","https://openalex.org/W2296084538","https://openalex.org/W2396066572","https://openalex.org/W2401862431","https://openalex.org/W2411584187","https://openalex.org/W2485000773","https://openalex.org/W2518033045","https://openalex.org/W2525096404","https://openalex.org/W2538863639","https://openalex.org/W2539957464","https://openalex.org/W2564063159","https://openalex.org/W2604754095","https://openalex.org/W2752949934","https://openalex.org/W2753333424","https://openalex.org/W2784134919","https://openalex.org/W2804550199","https://openalex.org/W2806616617","https://openalex.org/W2888125116","https://openalex.org/W2897922001","https://openalex.org/W2903379676","https://openalex.org/W2921261235","https://openalex.org/W2927835229","https://openalex.org/W2950702592","https://openalex.org/W2953987186","https://openalex.org/W2954006659","https://openalex.org/W2956281981","https://openalex.org/W2956831332","https://openalex.org/W2958728072","https://openalex.org/W2960535144","https://openalex.org/W2961732833","https://openalex.org/W2962904932","https://openalex.org/W2962940036","https://openalex.org/W2963270948","https://openalex.org/W2963704216","https://openalex.org/W2964314527","https://openalex.org/W2965027989","https://openalex.org/W2966957301","https://openalex.org/W2978725006","https://openalex.org/W2981223859","https://openalex.org/W2992960562","https://openalex.org/W2994419048","https://openalex.org/W2999421257","https://openalex.org/W2999498625","https://openalex.org/W3008092320","https://openalex.org/W3015249609","https://openalex.org/W3015863761","https://openalex.org/W3015990833","https://openalex.org/W3032408677","https://openalex.org/W3044401840","https://openalex.org/W3046544594","https://openalex.org/W3048537417","https://openalex.org/W3049399107","https://openalex.org/W3081772301","https://openalex.org/W3092903531","https://openalex.org/W3104102522","https://openalex.org/W3105531869","https://openalex.org/W3139222450","https://openalex.org/W3160110679","https://openalex.org/W3185618306","https://openalex.org/W4239865416","https://openalex.org/W4244711880","https://openalex.org/W4250155527","https://openalex.org/W4301409808"],"related_works":["https://openalex.org/W2051151610","https://openalex.org/W3108477817","https://openalex.org/W2087110361","https://openalex.org/W2578302123","https://openalex.org/W2994962255","https://openalex.org/W2290776461","https://openalex.org/W2772812160","https://openalex.org/W1967704239","https://openalex.org/W2965118803","https://openalex.org/W1568929685","https://openalex.org/W2380337725","https://openalex.org/W2084745480","https://openalex.org/W1606288703","https://openalex.org/W2254550820","https://openalex.org/W2753213830","https://openalex.org/W2293720080","https://openalex.org/W1672480283","https://openalex.org/W2399169556","https://openalex.org/W35528529","https://openalex.org/W3153315547"],"abstract_inverted_index":{"Abstract":[0],"Although":[1],"the":[2,52,107,115,132,173,176,194,218],"security":[3],"benefits":[4,220],"of":[5,48,118,135,146,175,193],"domain":[6],"name":[7],"encryption":[8],"technologies":[9],"such":[10],"as":[11],"DNS":[12,16],"over":[13,17,179],"TLS":[14],"(DoT),":[15],"HTTPS":[18],"(DoH),":[19],"and":[20,55,66,88,163,167,181,208,216,224],"Encrypted":[21],"Client":[22],"Hello":[23],"(ECH)":[24],"are":[25,185],"clear,":[26],"their":[27,128],"positive":[28],"impact":[29],"on":[30,51],"user":[31,110],"privacy":[32,219],"is":[33,80],"weakened":[34],"by\u2014the":[35],"still":[36,186],"exposed\u2014IP":[37],"address":[38,57],"information.":[39],"However,":[40],"content":[41],"delivery":[42],"networks,":[43],"DNS-based":[44],"load":[45,122],"balancing,":[46],"co-hosting":[47],"different":[49],"websites":[50,139,196],"same":[53],"server,":[54],"IP":[56,152],"churn,":[58],"all":[59],"contribute":[60],"towards":[61,211],"making":[62],"domain\u2013IP":[63],"mappings":[64],"unstable,":[65],"prevent":[67],"straightforward":[68],"IP-based":[69,94,213],"browsing":[70],"tracking.":[71],"In":[72],"this":[73,78],"paper,":[74],"we":[75,141],"show":[76],"that":[77,98,183],"instability":[79],"not":[81],"a":[82,85,100,109],"roadblock":[83],"(assuming":[84],"universal":[86],"DoT/DoH":[87,223],"ECH":[89],"deployment),":[90],"by":[91,202,222],"introducing":[92],"an":[93],"website":[95,108,206,214],"finger-printing":[96],"technique":[97,113],"allows":[99],"network-level":[101],"observer":[102],"to":[103,158],"identify":[104,144],"at":[105,188],"scale":[106],"visits.":[111],"Our":[112],"exploits":[114],"complex":[116],"structure":[117],"most":[119],"websites,":[120,162],"which":[121],"resources":[123],"from":[124],"several":[125],"domains":[126],"besides":[127],"primary":[129],"one.":[130],"Using":[131],"generated":[133,177],"fingerprints":[134,178],"more":[136],"than":[137],"200K":[138],"studied,":[140],"could":[142],"successfully":[143,189],"84%":[145],"them":[147],"when":[148],"observing":[149],"solely":[150],"destination":[151],"addresses.":[153],"The":[154],"accuracy":[155],"rate":[156],"increases":[157],"92%":[159],"for":[160,165,205],"popular":[161,166],"95%":[164],"sensitive":[168],"web-sites.":[169],"We":[170,200],"also":[171],"evaluated":[172],"robustness":[174],"time,":[180],"demonstrate":[182],"they":[184],"effective":[187],"identifying":[190],"about":[191],"70%":[192],"tested":[195],"after":[197],"two":[198],"months.":[199],"conclude":[201],"discussing":[203],"strategies":[204],"owners":[207],"hosting":[209],"providers":[210],"hindering":[212],"fingerprinting":[215],"maximizing":[217],"offered":[221],"ECH.":[225]},"counts_by_year":[{"year":2022,"cited_by_count":1}],"updated_date":"2026-08-05T07:39:15.569665","created_date":"2022-07-25T00:00:00"}