Orlando Martínez-Durive, Sachit Mishra, Cezary Ziemlicki, S. Rubrichi, Z. Smoreda, M. Fiore
{"title":"France Through the Lens of Mobile Traffic Data","authors":"Orlando Martínez-Durive, Sachit Mishra, Cezary Ziemlicki, S. Rubrichi, Z. Smoreda, M. Fiore","doi":"10.23919/TMA58422.2023.10198971","DOIUrl":"https://doi.org/10.23919/TMA58422.2023.10198971","url":null,"abstract":"Mobile usage data have shown unprecedented potential for data-driven research in various fields such as demography, sociology, geography, urban studies, criminology, and engineering. However, the lack of reference datasets limits research methods, results, verifiability, and reproducibility of outcomes hindering innovation opportunities. We release a novel mobile usage dataset offering a rare opportunity for the multidisciplinary research community to access rich mobile data of the spatiotemporal consumption of mobile applications in a developed country. The generation process of the dataset forms a new quality standard, leading to information about the demands generated by 68 popular mobile services, geo-referenced at a high resolution of $100times 100 mathrm{m}^{2}$ over 20 metropolitan areas in France and monitored during 77 consecutive days in 2019.","PeriodicalId":394676,"journal":{"name":"2023 7th Network Traffic Measurement and Analysis Conference (TMA)","volume":"7 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121837243","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
G. Caso, Mohammad Rajiullah, Konstantinos Kousias, Usman Ali, L. D. Nardis, A. Brunström, Özgü Alay, Marco Neri, Maria-Gabriella Di Benedetto
{"title":"An Initial Look into the Performance Evolution of 5G Non-Standalone Networks","authors":"G. Caso, Mohammad Rajiullah, Konstantinos Kousias, Usman Ali, L. D. Nardis, A. Brunström, Özgü Alay, Marco Neri, Maria-Gabriella Di Benedetto","doi":"10.23919/TMA58422.2023.10199039","DOIUrl":"https://doi.org/10.23919/TMA58422.2023.10199039","url":null,"abstract":"Fifth Generation (5G) networks have been operational worldwide for a couple of years. To reveal how the 5G system evolution (e.g., changes in network conditions, deployment, and configurations) affects user performance, empirical long-term analyses are required. This paper presents preliminary insights from our ongoing large-scale measurement study of the commercial 5G non-standalone (NSA) networks deployed in Rome, Italy. An initial comparison between the measurements in 2020-2021 vs. 2023 shows a decrease in throughput and latency performance, calling for deeper analyses toward understanding the root causes and deriving proper optimization solutions.","PeriodicalId":394676,"journal":{"name":"2023 7th Network Traffic Measurement and Analysis Conference (TMA)","volume":"8 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134215198","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Laurenz Grote, Ike Kunze, Constantin Sander, Klaus Wehrle
{"title":"Instant Messaging Meets Video Conferencing: Studying the Performance of IM Video Calls","authors":"Laurenz Grote, Ike Kunze, Constantin Sander, Klaus Wehrle","doi":"10.23919/TMA58422.2023.10199019","DOIUrl":"https://doi.org/10.23919/TMA58422.2023.10199019","url":null,"abstract":"Video conferencing applications typically use UDP and often implement their own congestion control. Research studying these custom algorithms generally finds that they do react to congestion and can hold their own against competing TCP flows. However, these works focus on applications specializing in video conferencing, neglecting those that only offer video conferencing as one of many features, such as many instant messengers. While these instant messaging-based video call applications (IMVCAs) may opt to use standardized frameworks, such as WebRTC, their actual implementations and behaviors are wildly unknown. In this paper, we thus set out to study the behavior of three popular IMVCAs, analyzing their interplay with TCP and the impact on QoE. We find that the surveyed IMVCAs (Signal, Telegram, WhatsApp) are TCP-friendly, i.e., they do not choke TCP. However, their per-app behavior differs significantly and no app equals the other: Signal and Telegram, e.g., take TCP-friendliness too far, yielding up to 90 % of their bandwidth. This results in severe QoE detriments in the form of drastically reduced sending rates and visual quality. As Signal is known to use WebRTC, this finding suggests that the current variant might be too conservative for coexisting with TCP. In contrast, WhatsApp counters congestion by filling queues to avoid losing bandwidth. Overall, IMVCAs do not keep up with the performance of specialized applications.","PeriodicalId":394676,"journal":{"name":"2023 7th Network Traffic Measurement and Analysis Conference (TMA)","volume":"16 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127444730","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
David Hasselquist, Elsa Kihlberg Gawell, Axel Karlström, Niklas Carlsson
{"title":"Phishing in Style: Characterizing Phishing Websites in the Wild","authors":"David Hasselquist, Elsa Kihlberg Gawell, Axel Karlström, Niklas Carlsson","doi":"10.23919/TMA58422.2023.10199059","DOIUrl":"https://doi.org/10.23919/TMA58422.2023.10199059","url":null,"abstract":"The prevalence of phishing domains is steadily rising as attackers exploit toolkits to create phishing websites. As web development expertise is no longer a prerequisite, phishing attacks have become more widespread, outpacing many existing detection methods. Developing novel techniques to identify malicious domains is crucial to safeguard potential victims online. While most current methods emphasize the visual aspects of phishing websites, in this paper, we investigate the underlying structure by collecting data on style sheets and certificates from both verified phishing domains and benign domains. Using a token-based similarity algorithm, we group the phishing domains into three categories and identify shared characteristics of these domains. Our work demonstrates the feasibility of using structural similarities to identify a website created using a phishing kit. By employing such detection, users would be able to browse the web with a reduced risk of falling victim to malicious activities.","PeriodicalId":394676,"journal":{"name":"2023 7th Network Traffic Measurement and Analysis Conference (TMA)","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117073725","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Francesco Pietrantonio, A. Botta, G. Ventre, L. Gallo, S. Zinno, Laura Mancuso, Roberta Presta
{"title":"Investigating Gaze Behavior in Phishing Email Identification","authors":"Francesco Pietrantonio, A. Botta, G. Ventre, L. Gallo, S. Zinno, Laura Mancuso, Roberta Presta","doi":"10.23919/TMA58422.2023.10199095","DOIUrl":"https://doi.org/10.23919/TMA58422.2023.10199095","url":null,"abstract":"The pervasiveness of phishing signals the insufficiency of current measures. Through a multidisciplinary approach, we conducted an eye-tracking study on how and where users look when they have to classify an email as phishing or legitimate. Furthermore, we investigated whether there is a difference between expert and non-expert subjects. The study showed firstly, better performance in recognising phishing emails by experts. Secondly, eye movement data showed the use of different email inspection methods between experts and non-experts. This could open up scenarios in the area of the improvement of training courses and the development of more intuitive email client interfaces in the suggestion of important clues in the recognltion of phishing emails.","PeriodicalId":394676,"journal":{"name":"2023 7th Network Traffic Measurement and Analysis Conference (TMA)","volume":"3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122989418","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Aurélien Buchet, Peter Snyder, Hamed Haddadi, C. Pelsser
{"title":"Detecting IP-tracking proof interfaces by looking for NATs","authors":"Aurélien Buchet, Peter Snyder, Hamed Haddadi, C. Pelsser","doi":"10.23919/TMA58422.2023.10198950","DOIUrl":"https://doi.org/10.23919/TMA58422.2023.10198950","url":null,"abstract":"In this poster, we propose an approach based on short-lived random identifiers to allow applications to detect when multiple users share the same IP address such as when they are behind NATs. Using NATed interfaces could provide a cheap way to evade IP-based tracking as the traffic of all users is merged into a single IP flow. As a result, it is harder for trackers to single out (and so re-identify by IP address) users behind a NAT. For many years, there has been a race between web trackers trying to find techniques to monitor user behaviour online, and privacy researchers looking for solutions to avoid such tracking. Despite progresses in browser privacy-preserving techniques, IP tracking is still highly effective because current solutions to hide an IP address such as VPNs, or the Tor network, rely on external services and often induce a high cost in terms of performance. Our proposal could lead to solutions that are cheaper to deploy and don't affect the performance as much. We developed an Android application detecting when an IP address was shared by multiple devices and reported the availability of such interfaces. We show that it is possible to identify networks where multiple users share the same IP address. We also discuss how our system can be protected from potential attackers.","PeriodicalId":394676,"journal":{"name":"2023 7th Network Traffic Measurement and Analysis Conference (TMA)","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125191533","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Nikhil Jha, Martino Trevisan, M. Mellia, Rodrigo Irarrazaval, Daniel Fernandez
{"title":"I Refuse if You Let Me: Studying User Behavior with Privacy Banners at Scale","authors":"Nikhil Jha, Martino Trevisan, M. Mellia, Rodrigo Irarrazaval, Daniel Fernandez","doi":"10.23919/TMA58422.2023.10198936","DOIUrl":"https://doi.org/10.23919/TMA58422.2023.10198936","url":null,"abstract":"Privacy Banners are a common experience while surfing the Web. Mandated by privacy regulations, they are the way for users to express their consent to the usage of cookies and data collection. They take various forms, carry different wordings and offer different interaction mechanisms. While several works have qualitatively evaluated the effectiveness of privacy banners, it is still unclear how users take advantage of the options offered and if and how the design of the banner could influence their choice. This work presents a large-scale analysis of how the Privacy Banner options impact on users' interaction with it. We use data from a global Consent Management Platform serving more than 400 websites with visitors from all countries. With this, we observe more than 4M interactions collected over three months. We find that only 1–4% of visitors opt out of cookies when more than one click is required. Conversely, when offered a Reject All button to deny consent with a single click, the percentage of users who deny consent increases to about 21%. We further investigate other properties, such as the visitor's country, device type, banner position, etc. While the results confirm some common beliefs, to the best of our knowledge, this is the first work to accurately quantify how people interact with Privacy Banners and observe the effect of offering a single-click refusal option. We believe our work improves the understanding of user behaviour and perception of privacy, as well as the implications and effectiveness of privacy regulations.","PeriodicalId":394676,"journal":{"name":"2023 7th Network Traffic Measurement and Analysis Conference (TMA)","volume":"65 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128873701","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pavlos Sermpezis, Lars Prehn, S. Kostoglou, Marcel Flores, A. Vakali, E. Aben
{"title":"Bias in Internet Measurement Platforms","authors":"Pavlos Sermpezis, Lars Prehn, S. Kostoglou, Marcel Flores, A. Vakali, E. Aben","doi":"10.23919/TMA58422.2023.10198985","DOIUrl":"https://doi.org/10.23919/TMA58422.2023.10198985","url":null,"abstract":"Network operators and researchers frequently use Internet measurement platforms (IMPs), such as RIPE Atlas, RIPE RIS, or RouteViews for, e.g., monitoring network performance, detecting routing events, topology discovery, or route optimization. To interpret the results of their measurements and avoid pitfalls or wrong generalizations, users must understand a platform's limitations. To this end, this paper studies an important limitation of IMPs, the bias, which exists due to the non-uniform deployment of the vantage points. Specifically, we introduce a generic framework to systematically and comprehensively quantify the multi-dimensional (e.g., across location, topology, network types, etc.) biases of IMPs. Using the framework and open datasets, we perform a detailed analysis of biases in IMPs that confirms well-known (to the domain experts) biases and sheds light on less-known or unexplored biases. To facilitate IMP users to obtain awareness of and explore bias in their measurements, as well as further research and analyses (e.g., methods for mitigating bias), we publicly share our code and data, and provide online tools (API, Web app, etc.) that calculate and visualize the bias in measurement setups.","PeriodicalId":394676,"journal":{"name":"2023 7th Network Traffic Measurement and Analysis Conference (TMA)","volume":"56 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133844595","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Gastón García González, P. Casas, Alicia Fernández
{"title":"Deep Generative Replay for Multivariate Time-Series Monitoring with Variational Autoencoders","authors":"Gastón García González, P. Casas, Alicia Fernández","doi":"10.23919/TMA58422.2023.10199001","DOIUrl":"https://doi.org/10.23919/TMA58422.2023.10199001","url":null,"abstract":"Multivariate time-series (MTS) play a crucial role in network monitoring and analysis problems. We explore the usage of generative AI for MTS data modeling, in particular for the sake of knowledge replay. Knowledge replay mechanisms help in leveraging past experiences to enhance learning, mitigate forgetting, promote generalization, and enable the transfer of knowledge across different tasks or domains. Using a VAE-based deep architecture for data modeling, we incorporate a Deep Generative Replay (DGR) approach to transfer previously learned latent representations into future learning tasks, enabling continual learning in MTS problems. We study the generative characteristics of VAE-based models on top of a multi-dimensional network monitoring dataset collected from an operational mobile Internet Service Provider (ISP), portraying its usage in the context of DGR learning tasks.","PeriodicalId":394676,"journal":{"name":"2023 7th Network Traffic Measurement and Analysis Conference (TMA)","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133509563","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Selim Ozcan, Ioana Livadariu, Georgios Smaragdakis, C. Griwodz
{"title":"Longitudinal Analysis of Inter-City Network Delays","authors":"Selim Ozcan, Ioana Livadariu, Georgios Smaragdakis, C. Griwodz","doi":"10.23919/TMA58422.2023.10198987","DOIUrl":"https://doi.org/10.23919/TMA58422.2023.10198987","url":null,"abstract":"During the last decades, public and private investments contributed to building the Internet infrastructure, including undersea cables, long-distance fiber links, broadband networks, and satellite constellations to reduce end-to-end delay. In this study, we measure the inter-city delays over the last six years, considering 17 major metropolitan areas around the globe. Our analysis shows that the delay for 88% of city pairs end-to-end delay has decreased. Moreover, we study delay changes for regional and long-haul (intercontinental) pairs. Our analysis shows that end-to-end delay has decreased for 80% and 55% of city pairs in Europe and North America, respectively. Our study also shows that despite the overall decrease in intercity delays, global phenomena, e.g., the COVID-19 pandemic, profoundly impact many inter-city connections simultaneously while not affecting others.","PeriodicalId":394676,"journal":{"name":"2023 7th Network Traffic Measurement and Analysis Conference (TMA)","volume":"94 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126084255","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}