Inferring the presence of reverse proxies through timing analysis
Alexander, Daniel R.
MetadataShow full item record
This thesis presents a method for inferring the presence of a reverse proxy server using packet timing analysis from the vantage point of a client system. This method can determine whether Internet users are receiving web content from the actual source or from some potentially spoofed proxy device; leading to better risk assessment and understanding of the cyber terrain. By using only the measurement and comparison of three-way handshake and content request/delivery packet round trip times, we identify an accurate classifier that detects the presence of a reverse proxy server with over 98% accuracy. This is an improvement over other inference methods because all measurements can be done from an external client machine. A secondary yet significant contribution is the robust data set that was produced as a result of this research. We have collected a set of over 6 million data points from a known set of 30 globally dispersed machines, which was instrumental in our research efforts and will be used for further studies and exploration.
Approved for public release; distribution is unlimited
Showing items related by title, author, creator and subject.
Waters, Kevin A. (Monterey, Calif. Naval Postgraduate School, 2002-12);A low complexity solution to remove follower, narrowband tone jamming signals which are randomly dispersed within the bandwidth of a hop without causing non-linear phase distortions in a frequency-hopping (FH) system is ...
Performance of coherent and noncoherent RAKE receivers with convolutional coding ricean fading and pulse-noise interference Kowalske, Kyle E. (Monterey, California. Naval Postgraduate School, 2004-06);The performance of coherent and noncoherent RAKE receivers over a fading channel in the presence of pulse-noise interference and additive white Gaussian noise is analyzed. Coherent RAKE receivers require a pilot tone for ...
McKee, L.L.; Bird, R.S.; Schwirzke, F. (American Physical Society, 1974-03);The dependence of the self-generated magnetic field associated with a laser-produced plasma on position, time, incident laser power, and nitrogen background pressure has been investigated. The presence of the ambient ...