I Know Where You are and What You are Sharing: Exploiting P2P Communications to Invade Users' Privacy - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2011

I Know Where You are and What You are Sharing: Exploiting P2P Communications to Invade Users' Privacy

Stevens Le Blond
  • Fonction : Auteur
  • PersonId : 912304
Chao Zhang
  • Fonction : Auteur
  • PersonId : 912305
Keith W. Ross
  • Fonction : Auteur
  • PersonId : 912306
Walid Dabbous

Résumé

In this paper, we show how to exploit real-time communication applications to determine the IP address of a targeted user. We focus our study on Skype, although other real-time communication applications may have similar privacy issues. We first design a scheme that calls an identified-targeted user inconspicuously to find his IP address, which can be done even if he is behind a NAT. By calling the user periodically, we can then observe the mobility of the user. We show how to scale the scheme to observe the mobility patterns of tens of thousands of users. We also consider the linkability threat, in which the identified user is linked to his Internet usage. We illustrate this threat by combining Skype and BitTorrent to show that it is possible to determine the filesharing usage of identified users. We devise a scheme based on the identification field of the IP datagrams to verify with high accuracy whether the identified user is participating in specific torrents. We conclude that any Internet user can leverage Skype, and potentially other real-time communication systems, to observe the mobility and filesharing usage of tens of millions of identified users.
Fichier principal
Vignette du fichier
skype.pdf (988.19 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

inria-00632780 , version 1 (15-10-2011)

Licence

Paternité

Identifiants

  • HAL Id : inria-00632780 , version 1

Citer

Stevens Le Blond, Chao Zhang, Arnaud Legout, Keith W. Ross, Walid Dabbous. I Know Where You are and What You are Sharing: Exploiting P2P Communications to Invade Users' Privacy. IMC’2011, Nov 2011, Berlin, Germany. ⟨inria-00632780⟩

Collections

INRIA INRIA2
2445 Consultations
1106 Téléchargements

Partager

Gmail Facebook X LinkedIn More