SiamHAN: IPv6 Address Correlation Attacks on TLS Encrypted Traffic via Siamese Heterogeneous Graph Attention Network

• URL: http://arxiv.org/abs/2204.09465v1
• Date: Wed, 20 Apr 2022 13:54:10 GMT
• Title: SiamHAN: IPv6 Address Correlation Attacks on TLS Encrypted Traffic via Siamese Heterogeneous Graph Attention Network
• Abstract summary: IPv6 addresses could easily be correlated with user activity, endangering their privacy. Mitigations to address this privacy concern have been deployed, making existing approaches for address-to-user correlation unreliable. This work demonstrates that an adversary could still correlate IPv6 addresses with users accurately, even with these protection mechanisms.
• Score: 10.299611702673635
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Unlike IPv4 addresses, which are typically masked by a NAT, IPv6 addresses could easily be correlated with user activity, endangering their privacy. Mitigations to address this privacy concern have been deployed, making existing approaches for address-to-user correlation unreliable. This work demonstrates that an adversary could still correlate IPv6 addresses with users accurately, even with these protection mechanisms. To do this, we propose an IPv6 address correlation model - SiamHAN. The model uses a Siamese Heterogeneous Graph Attention Network to measure whether two IPv6 client addresses belong to the same user even if the user's traffic is protected by TLS encryption. Using a large real-world dataset, we show that, for the tasks of tracking target users and discovering unique users, the state-of-the-art techniques could achieve only 85% and 60% accuracy, respectively. However, SiamHAN exhibits 99% and 88% accuracy.

Related papers

• Modality-Decoupled Federated Learning for Privacy-Preserving Embodied Intelligence in 6G [90.42669277637026]
  Sixth-generation (6G) wireless networks are expected to provide a key infrastructure for large-scale embodied intelligence.<n>This article proposes FedMVLA, a modality-decoupled FL framework for privacy-preserving embodied intelligence in 6G networks.
  arXiv  Detail & Related papers  (2026-09-09T01:36:44Z)
• Cleaning the NTP Pool: Detecting and Mitigating NTP-Sourced IPv6 Scanning [1.2891210250935148]
  The ephemeral and random nature of IPv6 client addresses presents a practical challenge to attacks that depend on Internet-wide scanning or reconnaissance.<n>We develop a methodology to rigorously identify such IPv6 address harvesting and the entities gathering addresses.<n>We identify 22 NTP Pool servers, within 4 primary clusters, that are part of larger monitoring infrastructures that utilize the gathered addresses for reconnaissance, port scanning, and service and vulnerability enumeration.
  arXiv  Detail & Related papers  (2026-07-24T02:15:27Z)
• Large-scale online deanonymization with LLMs [58.46277616551135]
  We show that large language models can be used to perform at-scale deanonymization.<n>With full Internet access, our agent can re-identify Hacker News users and Anthropic Interviewer participants at high precision.
  arXiv  Detail & Related papers  (2026-02-18T19:02:50Z)
• Stop Tracking Me! Proactive Defense Against Attribute Inference Attack in LLMs [61.15237978606501]
  Large language models can infer private user attributes from user-generated text.<n>Existing anonymization-based defenses are coarse-grained, lacking word-level precision in anonymizing privacy-leaking elements.<n>We propose a unified defense framework that combines fine-grained anonymization (TRACE) with inference-preventing optimization (RPS)
  arXiv  Detail & Related papers  (2026-02-12T03:37:50Z)
• Where Have All the Firewalls Gone? Security Consequences of Residential IPv6 Transition [5.833756501605651]
  As the Internet transitions to majority IPv6, residential connections no longer require the use of NAT.<n>We show that we are able to reach more printers, iPhones, and smart lights over IPv6 than full IPv4-wide scans could.
  arXiv  Detail & Related papers  (2025-09-05T04:09:47Z)
• EGNInfoLeaker: Unveiling the Risks of Public Key Reuse and User Identity Leakage in Blockchain [10.349392384230274]
  In this paper, we design a system called EGNInfoLeaker.<n>Our study is the first work that uncovers widespread public key reuse across peer-to-peer networks.<n>Going forward, our detection framework provides a foundation for enhancing real-world privacy preservation in decentralized networks.
  arXiv  Detail & Related papers  (2025-07-02T12:07:03Z)
• Devil's Hand: Data Poisoning Attacks to Locally Private Graph Learning Protocols [46.94619400437805]
  This work introduces the first data poisoning attack targeting locally private graph learning protocols.<n>The attacker injects fake users into the protocol, manipulates these fake users to establish links with genuine users, and sends carefully crafted data to the server.<n>The effectiveness of the attack is demonstrated both theoretically and empirically.
  arXiv  Detail & Related papers  (2025-06-11T14:46:11Z)
• Partial and Fully Homomorphic Matching of IP Addresses Against Blacklists for Threat Analysis [0.46040036610482665]
  An IP address is a typical identifier which is used to map a network address to a person. In applications which are privacy-aware, we may aim to hide the IP address while aiming to determine if the address comes from a blacklist. One solution is to use homomorphic encryption to match an encrypted version of an IP address to a blacklisted network list.
  arXiv  Detail & Related papers  (2025-02-22T15:55:55Z)
• An Extended View on Measuring Tor AS-level Adversaries [1.0170676980352482]
  We use the Atlas framework to infer the risk of deanonymization for IPv4 clients in Germany and the US. For clients in Germany and the US, the overall picture, however, has not changed since 2020. Russian users are able to securely evade censorship using Tor.
  arXiv  Detail & Related papers  (2024-03-13T13:27:02Z)
• Protect Your Score: Contact Tracing With Differential Privacy Guarantees [68.53998103087508]
  We argue that privacy concerns currently hold deployment back. We propose a contact tracing algorithm with differential privacy guarantees against this attack. Especially for realistic test scenarios, we achieve a two to ten-fold reduction in the infection rate of the virus.
  arXiv  Detail & Related papers  (2023-12-18T11:16:33Z)
• A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applications [76.88662943995641]
  Graph Neural Networks (GNNs) have gained significant attention owing to their ability to handle graph-structured data. To address this issue, researchers have started to develop privacy-preserving GNNs. Despite this progress, there is a lack of a comprehensive overview of the attacks and the techniques for preserving privacy in the graph domain.
  arXiv  Detail & Related papers  (2023-08-31T00:31:08Z)
• One-Shot Learning for Periocular Recognition: Exploring the Effect of Domain Adaptation and Data Bias on Deep Representations [59.17685450892182]
  We investigate the behavior of deep representations in widely used CNN models under extreme data scarcity for One-Shot periocular recognition. We improved state-of-the-art results that made use of networks trained with biometric datasets with millions of images. Traditional algorithms like SIFT can outperform CNNs in situations with limited data.
  arXiv  Detail & Related papers  (2023-07-11T09:10:16Z)
• Model Barrier: A Compact Un-Transferable Isolation Domain for Model Intellectual Property Protection [52.08301776698373]
  We propose a novel approach called Compact Un-Transferable Isolation Domain (CUTI-domain) CUTI-domain acts as a barrier to block illegal transfers from authorized to unauthorized domains. We show that CUTI-domain can be easily implemented as a plug-and-play module with different backbones.
  arXiv  Detail & Related papers  (2023-03-20T13:07:11Z)
• Cross-Network Social User Embedding with Hybrid Differential Privacy Guarantees [81.6471440778355]
  We propose a Cross-network Social User Embedding framework, namely DP-CroSUE, to learn the comprehensive representations of users in a privacy-preserving way. In particular, for each heterogeneous social network, we first introduce a hybrid differential privacy notion to capture the variation of privacy expectations for heterogeneous data types. To further enhance user embeddings, a novel cross-network GCN embedding model is designed to transfer knowledge across networks through those aligned users.
  arXiv  Detail & Related papers  (2022-09-04T06:22:37Z)
• Smooth Anonymity for Sparse Graphs [69.1048938123063]
  differential privacy has emerged as the gold standard of privacy, however, when it comes to sharing sparse datasets. In this work, we consider a variation of $k$-anonymity, which we call smooth-$k$-anonymity, and design simple large-scale algorithms that efficiently provide smooth-$k$-anonymity.
  arXiv  Detail & Related papers  (2022-07-13T17:09:25Z)
• 6GAN: IPv6 Multi-Pattern Target Generation via Generative Adversarial Nets with Reinforcement Learning [10.054944443127376]
  6GAN is a novel architecture built with Generative Adrial Net (GAN) and reinforcement learning for multi-pattern target generation. 6GAN's generators could keep a strong imitating ability for each pattern and 6GAN's discriminator obtains outstanding pattern discrimination ability with a 0.966 accuracy.
  arXiv  Detail & Related papers  (2022-04-21T01:25:20Z)
• 6GCVAE: Gated Convolutional Variational Autoencoder for IPv6 Target Generation [7.462399334010083]
  In this paper, we try to use deep learning to design such IPv6 target generation algorithms. The model effectively learns the address structure by stacking the gated convolutional layer to construct Variational Autoencoder (VAE) Experiments indicate that our approach 6GCVAE outperformed the conventional VAE models and the state-of-the-art target generation algorithm in two active address datasets.
  arXiv  Detail & Related papers  (2022-04-20T12:36:19Z)
• Community Detection for Access-Control Decisions: Analysing the Role of Homophily and Information Diffusion in Online Social Networks [0.0]
  Access-Control Lists (ACLs) are one of the most important privacy features of Online Social Networks (OSNs) This work investigates the use of community-detection algorithms for the automatic generation of ACLs in OSNs.
  arXiv  Detail & Related papers  (2021-04-19T08:49:59Z)
• 6VecLM: Language Modeling in Vector Space for IPv6 Target Generation [26.73994727119052]
  We introduce our approach 6VecLM to explore achieving such target generation algorithms. The architecture can map addresses into a vector space to interpret semantic relationships. Experiments indicate that our approach can perform semantic classification on address space.
  arXiv  Detail & Related papers  (2020-08-05T16:26:50Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.