paperbot · PL 论文追踪

全部论文 待读 收藏

P2 TSA: a tool to detect and quantify network side-channels

TSA:一种检测并量化网络侧信道的工具
FSE Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering2022匹配度 1/10 · 该论文研究网络侧信道检测与量化,属于安全与隐私方向,与用户关注的 PL/AI 交叉、静态分析、Agentic 程序、浮点程序分析和贝叶斯程序分析均无直接关系。引用 2 inbox
İsmet Burak Kadron, Tevfik Bultan
crossref: 2026-09-12

AI 速览

一句话:提出黑盒网络侧信道分析工具 TSA,可自动收集流量并检测、量化加密通信中的信息泄漏。

移动应用、物联网设备与 Web 服务普遍加密客户端与服务器之间的通信,但加密只能隐藏载荷,数据包大小与时序仍暴露给窃听者,从而可能泄漏信息并损害用户隐私。为检测并量化这类网络侧信道,本文提出 TSA:一个黑盒分析工具。TSA 提供可扩展框架,用户可为待分析系统编写输入变异器,从而自动化流量跟踪收集;用户也可直接传入自行采集的跟踪进行分析。TSA 以开源 Python 包和命令行工具形式发布,并附带演示、工具与基准测试,便于复现与使用。

问题
加密网络流量中,数据包大小与时序仍对窃听者可见,可能泄漏信息并损害用户隐私。
方法
提出黑盒工具 TSA,通过可编写输入变异器的框架自动收集跟踪,也支持直接输入跟踪,以检测并量化网络侧信道泄漏。
评估
以开源 Python 包和命令行工具发布,并提供演示、工具与基准测试供使用。
原文摘要(Abstract)

Mobile applications, Internet of Things devices and web services are pervasive and they all encrypt the communications between servers and clients to not have information leakages. While the network traffic is encrypted, packet sizes and timings are still visible to an eavesdropper and these properties can leak information and sacrifice user privacy. We present TSA, a black box network side-channel analysis tool which detects and quantifies side-channel information leakages. TSA provides the users with the means to automate trace gathering by providing a framework in which the users can write mutators for the inputs to the system under analysis. TSA can also take as input traces directly for analysis if the user prefers to gather them separately. TSA is open-source and available as a Python package and a command-line tool. TSA demo, tool and benchmarks are available at https://github.com/kadron/tsa-tool.

链接与引用

DOI 原文 · PDF(开放获取) ·

BibTeX
@inproceedings{paperbot6992,
  title = {TSA: a tool to detect and quantify network side-channels},
  author = {İsmet Burak Kadron and Tevfik Bultan},
  booktitle = {FSE},
  year = {2022},
  doi = {10.1145/3540250.3558938}
}