Fraunhofer-Gesellschaft

Publica

Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

PerfWeb: How to violate web privacy with hardware performance events

 
: Gulmezoglu, B.; Zankl, A.; Eisenbarth, T.; Sunar, B.

:

Foley, S.N.:
Computer security - ESORICS 2017. 22nd European Symposium on Research in Computer Security. Pt.2 : Oslo, Norway, September 11-15, 2017; Proceedings
Cham: Springer International Publishing, 2017 (Lecture Notes in Computer Science 10493)
ISBN: 978-3-319-66398-2 (Print)
ISBN: 978-3-319-66399-9 (Online)
S.80-97
European Symposium on Research in Computer Security (ESORICS) <22, 2017, Oslo>
Englisch
Konferenzbeitrag
Fraunhofer AISEC ()

Abstract
The browser history reveals highly sensitive information about users, such as financial status, health conditions, or political views. Private browsing modes and anonymity networks are consequently important tools to preserve the privacy not only of regular users but in particular of whistleblowers and dissidents. Yet, in this work we show how a malicious application can infer opened websites from Google Chrome in Incognito mode and from Tor Browser by exploiting hardware performance events (HPEs). In particular, we analyze the browsers’ microarchitectural footprint with the help of advanced Machine Learning techniques: k-th Nearest Neighbors, Decision Trees, Support Vector Machines, and in contrast to previous literature also Convolutional Neural Networks. We profile 40 different websites, 30 of the top Alexa sites and 10 whistleblowing portals, on two machines featuring an Intel and an ARM processor. By monitoring retired instructions, cache accesses, and bus cycles for at most 5 s we manage to classify the selected websites with a success rate of up to 86.3%. The results show that hardware performance events can clearly undermine the privacy of web users. We therefore propose mitigation strategies that impede our attacks and still allow legitimate use of HPEs.

: http://publica.fraunhofer.de/dokumente/N-470789.html