@techreport{sun2002statistical, author = {Sun, Qixiang and Simon, Daniel R. and Wang, Yi-Min and Russell, Wilf and Padmanabhan, Venkat and Qiu, Lili}, title = {Statistical Identification of Encrypted Web Browsing Traffic}, year = {2002}, month = {March}, abstract = {Encryption is often proposed as a tool for protecting the privacy of World Wide Web browsing. However, encryption - particularly as typically implemented in, or in concert with popular Web browsers - does not hide all information about the encrypted plaintext. Specifically, HTTP object count and sizes are often revealed (or at least incompletely concealed). We investigate the identifiability of World Wide Web traffic based on this unconcealed information in a large sample of Web pages, and show that it suffices to identify a significant fraction of them quite reliably. We also suggest some possible countermeasures against the exposure of this kind of information and experimentally evaluate their effectiveness.}, publisher = {Institute of Electrical and Electronics Engineers, Inc.}, url = {http://approjects.co.za/?big=en-us/research/publication/statistical-identification-of-encrypted-web-browsing-traffic/}, pages = {13}, number = {MSR-TR-2002-23}, }