I Still Know What You Did Last Summer: Inferring Sensitive User Activities on Messaging Applications Through Traffic Analysis 09/01/2023 10461780 10.1109/TDSC.2022.3218191 IEEE Transactions on Dependable and Secure Computing 1545-5971 20 5 Ardavan BozorgiAlireza BahramaliFateme RezaeiAmirhossein GhafariAmir HoumansadrRamin SoltaniDennis GoeckelDon Towsley

F ate me Re z aei, A mir h ossei n G h af ari, a n d A mir H o u m a ns a dr are wit h t he De p art me nt of C o m p uter S cie n ce, U ni versit y of M ass a c h usetts A m herst, A m herst, M A 0 1 0 0 3 U S A. E-m ail: {fre z aei, g h af ari, a mir} @ cs. u m ass.e d u. R a mi n S olt a ni is wit h Ele ctri c al a n d C o m p uter E n gi neeri n g De p art me nt, U ni versit y of M ass a c h usetts A m herst, A m herst, M A 0 1 0 0 3 U S A. Em ail: r a mi n.s olt a ni @ g m ail. c o m. De n nis G oe c kel is wit h t he E C E De p art me nt, U ni versit y of M ass a c h usetts A m herst, A m herst, M A 0 1 0 0 3 U S A. E-m ail: g oe c kel @e cs. u m ass.e d u.

M a n us cri pt re cei ve d 2 6 Fe br u ar y 2 0 2 2; re vise d 2 8 A u g ust 2 0 2 2; a c ce pte d 1 5 O ct o ber 2 0 2 2. D ate of p u bli c ati o n 3 1 O ct o ber 2 0 2 2; d ate of c urre nt versi o n 1 Se pte m ber 2 0 2 3. T his w o r k w a s s u p p orte d i n p art b y N S F u n der Gr a nts 1 9 5 3 7 8 6 a n d 1 5 6 4 0 6 7 a n d i n p art b y D A R P A a n d NI W C u n der Gr a nt N 6 6 0 0 1-1 5-C-4 0 6 7. N ot e t h at T y p e II err or o c c ur s w h e n l e s s t h a n h n m e ss a g e s of f ðC Þ m at c h f ðU Þ w h e n H 1 i s tr u e. T h er ef or e 0. 1 0. 8 2 4 0. 5 0. 9 0 2 1 0. 9 2 1 1 0 0. 9 7 4 1 0 0 0. 9 8 3 or g /f a q [ 9 6] " W h er e i s t el e gr a m b a s e d ? " 2 0 1 3. htt p s: / /t el e gr a m. or g /f a q [ 9 7] " T el e g r a m a n d i n st a g r a m b ei n g r e st ri ct e d i n I r a n, " 2 0 1 8.

d i n ot h er p art s of t h e n et w or k (t o b e a bl e t o i d e ntif y t h e I P a d dr e s s e s of t h e m e m b er s or a d mi n s of t h e t ar g et c h a n n el). H o w e v er, w e c a n n ot tri vi all y a p pl y e xi sti n g fl o w c orr el ati o n t e c h ni q u e s t o t h e I M s c e n ari o, si n c e t h e tr af fi c m o d el s a n d c o m m u ni c ati o n n oi s e ar e e ntir el y diff er e nt i n t h e I M s c e n ari o. W e, t h er
s o i s t h at t h e
Ge ner ati n g Tr af fi c. Wit h all of t h e st u di e d SI M s er vi c e s, t h e a d v er s ar y i s n ot a bl e t o s e e t h e c o nt e nt s of t h e t ar g et clie nt' s c o m m u ni c ati o n s b y i nt er c e pti n g h er tr af fi c ( d u e t o e n cr y pti o n), h o w e v er s h e c a n c a pt ur e t h e e n cr y pt e d tr af fi c of t h e t ar g et cli e nt. T h e a d v er s ar y t h e n u s e s t h e d et e cti o n al g orit h m s i ntr o d u c e d i n S e cti o n 5 t o d e ci d e if t h e t ar g et u s er i s a s s o ci at e d wit h t h e t ar

A ut h ori z e d li c e n s e d u s e li mit e d t o: U ni v er sit y of M a s s a c h u s ett s A m h er st. D o w nl o a d e d o n S e pt e m ber 1 1, 2 0 2 3 at 1 8: 0 5: 5 2U T C fr o m I E E E X pl or e. R e stri cti o n s a p pl y.