Information Technology Reference
In-Depth Information
Fig. 8. Distribution of Session Coverage
of Fragments (Test A)
Fig. 9. Distribution of Session Coverage
of Fragments (Test B)
Fig. 10. Distribution of Accuracy
Scores, Naive Chaining (Test A)
Fig. 11.
Distribution
of
Accuracy
Scores, Heuristic (Test B)
6An ly s
The previous section showed that the Link Chaining Attack was able to group
TCP connections into non-trivial fragments with moderate success. The inde-
gree heuristic proved to be far more accurate than naive chaining, although the
fragment sizes it produced were much smaller. The averages for each metric are
summarized in Table 1 below.
Table 1. Summary of Link Chaining Performance Averages
Test
Fragment Size Coverage Accuracy Triviality Ambiguity
A. Naive
58.67
31.48
24.15
6.96
3.28
B. Heuristic
10.62
12.63
88.41
14.3
3.32
Search WWH ::




Custom Search