Towards Language-Based Mitigation of Traffic Analysis Attacks

TL;DR

This paper introduces SELENE, a language-based approach to mitigate traffic analysis attacks by enabling secure communication over observable channels, reducing overheads compared to existing methods, and advancing practical online security.

Contribution

We present SELENE, a novel language for secure communication that addresses traffic analysis vulnerabilities in observable channels, with provable security and reduced overheads.

Findings

SELENE significantly reduces latency and bandwidth overheads.

The language provides provable security guarantees.

It offers a practical solution for secure online communication.

Abstract

Traffic analysis attacks pose a major risk for online security. Distinctive patterns in communication act as fingerprints, enabling adversaries to de-anonymise communicating parties or to infer sensitive information. Despite the attacks being known for decades, practical solution are scarce. Network layer countermeasures have relied on black box padding schemes that require significant overheads in latency and bandwidth to mitigate the attacks, without fundamentally preventing them, and the problem has received little attention in the language-based information flow literature. Language-based methods provide a strong foundation for fundamentally addressing security issues, but previous work has overwhelmingly assumed that interactive programs communicate over secure channels, where messages are undetectable by unprivileged adversaries. This assumption is too strong for online communication where packets can be trivially observed by eavesdropping. In this paper we introduce SELENE, a small language for principled, provably secure communication over channels where packets are publicly observable, and we demonstrate how our program level defence can reduce the latency and bandwidth overheads induced compared with program-agnostic defence mechanisms. We believe that our results constitute a step towards practical, secure online communication.