VoIP Tracing. Active De-anonymization of Streams. Timing Attacks [LRWW ’04]. “Normal” flows e.g. HTTP, FTP, SSH Think times dominate Very easy to do timing analysis Constant rate flows 10 pkts/sec = 1 pkt. every 0.1 sec All streams look the same Correlations are poor dropped pkts help.
Active De-anonymization of Streams
Trent’s Anonymity ServiceA Simple Idea