Forensics/Privacy Research

All papers can be downloaded from our bibliography server

Our research group's work on the limits of Internet anonymity and privacy. All traffic can be traced back to a unique IP address. This enables eavesdroppers to track the activities of the innocent public. At the same time, aspects of Internet communication make it difficult for law enformcement to track predators. Our goal has been to find the true characteristics of private or anonymous communication on the Internet.

We have looked at several attacks that break protocols for anonymity, largely based on traffic analysis. For example, we have looked at great detail at the predecessor and intersection attacks, both use only information about other proxies in the network.

Most recently, we have begun posing our research as an issue of computer forensics and investigations, which is the dual problem of privacy. We have presented a straightforward traffic analysis attack against encrypted HTTP streams that is surprisingly effective in identifying the source of web traffic. We have also evaluated forensic investigation of databases.