Here be web proxies

Nicholas Weaver; Christian Kreibich; Martin Dam; Vern Paxson

doi:10.1007/978-3-319-04918-2_18

Here be web proxies

Nicholas Weaver, Christian Kreibich, Martin Dam, Vern Paxson

Institut for Elektroniske Systemer

Publikation: Bidrag til bog/antologi/rapport/konference proceeding › Konferenceartikel i proceeding › Forskning › peer review

38 Citationer (Scopus)

Abstract

HTTP proxies serve numerous roles, from performance enhancement to access control to network censorship, but often operate stealthily without explicitly indicating their presence to the communicating endpoints. In this paper we present an analysis of the evidence of proxying manifest in executions of the ICSI Netalyzr spanning 646,000 distinct IP addresses ("clients"). To identify proxies we employ a range of detectors at the transport and application layer, and report in detail on the extent to which they allow us to fingerprint and map proxies to their likely intended uses. We also analyze 17,000 clients that include a novel proxy location technique based on traceroutes of the responses to TCP connection establishment requests, which provides additional clues regarding the purpose of the identified web proxies. Overall, we see 14% of Netalyzr-analyzed clients with results that suggest the presence of web proxies.

Originalsprog	Engelsk
Titel	Passive and Active Measurement : 15th International Conference, PAM 2014, Los Angeles, CA, USA, March 10-11, 2014, Proceedings
Redaktører	Michalis Faloutsos, Aleksandar Kuzmanovic
Antal sider	10
Vol/bind	8362
Forlag	Springer
Publikationsdato	19 mar. 2014
Sider	183-192
ISBN (Trykt)	978-331904917-5
ISBN (Elektronisk)	978-3-319-04918-2
DOI	https://doi.org/10.1007/978-3-319-04918-2_18
Status	Udgivet - 19 mar. 2014
Begivenhed	15th International Conference on Passive and Active Measurement - Los Angeles, CA, USA Varighed: 10 mar. 2014 → 11 mar. 2014

Konference

Konference	15th International Conference on Passive and Active Measurement
Land/Område	USA
By	Los Angeles, CA
Periode	10/03/2014 → 11/03/2014

Navn	Lecture Notes in Computer Science
ISSN	0302-9743

Adgang til dokumentet

10.1007/978-3-319-04918-2_18

http://www.springer.com/gp/book/9783319049175

AUB Link

Søg efter materialet i Aalborg Universitetsbiblioteks søgemaskine

Citationsformater

@inproceedings{931cfd6febdf42439412052d2da3a47b,

title = "Here be web proxies",

abstract = "HTTP proxies serve numerous roles, from performance enhancement to access control to network censorship, but often operate stealthily without explicitly indicating their presence to the communicating endpoints. In this paper we present an analysis of the evidence of proxying manifest in executions of the ICSI Netalyzr spanning 646,000 distinct IP addresses ({"}clients{"}). To identify proxies we employ a range of detectors at the transport and application layer, and report in detail on the extent to which they allow us to fingerprint and map proxies to their likely intended uses. We also analyze 17,000 clients that include a novel proxy location technique based on traceroutes of the responses to TCP connection establishment requests, which provides additional clues regarding the purpose of the identified web proxies. Overall, we see 14% of Netalyzr-analyzed clients with results that suggest the presence of web proxies.",

author = "Nicholas Weaver and Christian Kreibich and Martin Dam and Vern Paxson",

year = "2014",

month = mar,

day = "19",

doi = "10.1007/978-3-319-04918-2_18",

language = "English",

isbn = "978-331904917-5",

volume = "8362 ",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "183--192",

editor = "Michalis Faloutsos and Aleksandar Kuzmanovic",

booktitle = "Passive and Active Measurement",

address = "Germany",

note = "15th International Conference on Passive and Active Measurement ; Conference date: 10-03-2014 Through 11-03-2014",

}

Weaver, N, Kreibich, C, Dam, M & Paxson, V 2014, Here be web proxies. i M Faloutsos & A Kuzmanovic (red), Passive and Active Measurement: 15th International Conference, PAM 2014, Los Angeles, CA, USA, March 10-11, 2014, Proceedings. bind 8362 , Springer, Lecture Notes in Computer Science, s. 183-192, 15th International Conference on Passive and Active Measurement, Los Angeles, CA, USA, 10/03/2014. https://doi.org/10.1007/978-3-319-04918-2_18

Here be web proxies. / Weaver, Nicholas; Kreibich, Christian; Dam, Martin et al.
Passive and Active Measurement: 15th International Conference, PAM 2014, Los Angeles, CA, USA, March 10-11, 2014, Proceedings. red. / Michalis Faloutsos; Aleksandar Kuzmanovic. Bind 8362 Springer, 2014. s. 183-192 (Lecture Notes in Computer Science).

Publikation: Bidrag til bog/antologi/rapport/konference proceeding › Konferenceartikel i proceeding › Forskning › peer review

TY - GEN

T1 - Here be web proxies

AU - Weaver, Nicholas

AU - Kreibich, Christian

AU - Dam, Martin

AU - Paxson, Vern

PY - 2014/3/19

Y1 - 2014/3/19

N2 - HTTP proxies serve numerous roles, from performance enhancement to access control to network censorship, but often operate stealthily without explicitly indicating their presence to the communicating endpoints. In this paper we present an analysis of the evidence of proxying manifest in executions of the ICSI Netalyzr spanning 646,000 distinct IP addresses ("clients"). To identify proxies we employ a range of detectors at the transport and application layer, and report in detail on the extent to which they allow us to fingerprint and map proxies to their likely intended uses. We also analyze 17,000 clients that include a novel proxy location technique based on traceroutes of the responses to TCP connection establishment requests, which provides additional clues regarding the purpose of the identified web proxies. Overall, we see 14% of Netalyzr-analyzed clients with results that suggest the presence of web proxies.

AB - HTTP proxies serve numerous roles, from performance enhancement to access control to network censorship, but often operate stealthily without explicitly indicating their presence to the communicating endpoints. In this paper we present an analysis of the evidence of proxying manifest in executions of the ICSI Netalyzr spanning 646,000 distinct IP addresses ("clients"). To identify proxies we employ a range of detectors at the transport and application layer, and report in detail on the extent to which they allow us to fingerprint and map proxies to their likely intended uses. We also analyze 17,000 clients that include a novel proxy location technique based on traceroutes of the responses to TCP connection establishment requests, which provides additional clues regarding the purpose of the identified web proxies. Overall, we see 14% of Netalyzr-analyzed clients with results that suggest the presence of web proxies.

U2 - 10.1007/978-3-319-04918-2_18

DO - 10.1007/978-3-319-04918-2_18

M3 - Article in proceeding

SN - 978-331904917-5

VL - 8362

T3 - Lecture Notes in Computer Science

SP - 183

EP - 192

BT - Passive and Active Measurement

A2 - Faloutsos, Michalis

A2 - Kuzmanovic, Aleksandar

PB - Springer

T2 - 15th International Conference on Passive and Active Measurement

Y2 - 10 March 2014 through 11 March 2014

ER -

Here be web proxies

Abstract

Konference

Adgang til dokumentet

AUB Link

Fingeraftryk

Citationsformater