Tor traffic is obfuscated by Meek to behave as ordinary cloud service traffic. In order to advance the capability of network monitoring systems, this paper proposes a Mixture of Gaussians based Hidden Markov Model (MGHMM), a new model for identifying Meek-based Tor traffic.
and generic Markov model for Meek-based Tor traffic ... identify Meek-based Tor traffic and has a high identification ... Zhioua, “Tor traffic analysis using Hidden ...
... Meek is a pluggable transport that allows Tor traffic to be hidden in the background traffic. To enhance the possibility of monitoring illegal activities ...
– propose a novel method to identify Tor hidden service access activity under MEEK-based obfuscation scenario only based on key TCP package sequence, which can ...
Encrypted traffic classification based on Gaussian mixture models and Hidden Markov Models. ... Meek-Based Tor Traffic Identification with Hidden Markov Model.
Tor traffic analysis and identification | Semantic Scholar
www.semanticscholar.org › paper › Tor-t...
This paper presents a technique able to identify whether an host is generating Tor-related traffic and resorts to well-known machine learning algorithms in ...
Meek, a traffic obfuscation method, protects Tor users from censor- ship by hiding traffic to the Tor network inside an HTTPS connection to a permitted host.
... According to this feature, Yao et al. [20] proposed a method based on a Mixture of Gaussians-based Hidden Markov Model (MGHMM), which characterize the ...
Jun 21, 2022 · In this paper, we propose a novel communication fingerprint abstracted from key packet sequences, and attempt to efficiently identify end users ...
in “Meek-based tor traffic identification with hidden markov model.” used a Markov model and achieved an accuracy of 99.98%. ○ Nasr et al. in “Strong flow ...