{"id":1704,"date":"2008-01-16T17:21:08","date_gmt":"2008-01-16T22:21:08","guid":{"rendered":"https:\/\/engineering.jhu.edu\/magazine-archive\/?p=1704"},"modified":"2014-12-16T17:21:52","modified_gmt":"2014-12-16T22:21:52","slug":"beware-eavesdropper","status":"publish","type":"post","link":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/","title":{"rendered":"Beware the Eavesdropper"},"content":{"rendered":"\"eavesdropper\"<\/a>\n

In the past decade, millions of people have begun to use Voice Over Internet Protocol (VOIP) services that route their telephone calls over the Internet. Because the public nature of the Internet makes eavesdropping relatively easy, VOIP providers are increasingly encrypting the conversations to protect users\u2019 privacy.<\/p>\n

But the encryption scheme has a weak spot, according to Whiting School computer scientists. Although the words will be garbled, a clever eavesdropper will be able to figure out what language is being spoken. And the researchers suspect that the encryption scheme in some circumstances might \u201cleak\u201d even more information, such as who is talking.<\/p>\n

In the arcane world of encryption a vulnerability that gives this much information away is a pretty big deal.<\/p>\n

\u201cWe can\u2019t be naive about how determined or dedicated the attacker can be. Information, even in small amounts, if gathered in a timely way can have enormous benefits [to the eavesdropper],\u201d says Gerald M. Masson, a professor in the Department of Computer Science and director of the Johns Hopkins University Information Security Institute.<\/p>\n

Of course, intelligence services might want to use the newfound knowledge to zero in on potential terrorists. But corporate spies might also use it against competitors\u2014perhaps getting a heads up about the location of a new plant based on the language being spoken in eavesdropped phone calls.<\/p>\n

Masson, along with associate professor Fabian Monrose and graduate students Charles V. Wright and Lucas Ballard, showed that weaknesses in VOIP encryption let them make pretty good guesses about what language the conversations are being conducted in, even though the actual words remained obscure. They presented their findings at the 16th Usenix Security Conference in Boston last August.<\/p>\n

Here\u2019s the problem the researchers discovered: To send a phone call over the Internet, VOIP software first converts the analog signal to a digital one. To save bandwidth, most software uses a trick called Variable Bit Rate encoding\u2014 each 20 millisecond \u201cframe\u201d of the conversation is encoded using only as many bits as are needed to convey the information. For instance, a frame that contains a vowel sound will contain more bits than one that contains a consonant like an ‘s’.<\/p>\n

Before these frames are sent over the Internet they can be encrypted. But the encryption doesn\u2019t hide the size of each frame. What the researchers showed is that an attacker who intercepts the conversation can do a statistical analysis of the frame sizes, and use that analysis to make a good guess about what language is being spoken.<\/p>\n

The researchers did it themselves, making encrypted VOIP calls between their own computers and playing files from a dataset of native speakers of 21 different languages. Using their technique, they could correctly classify the language being spoken at a much better rate than random guessing. For instance, they could correctly predict if Indonesian was being spoken 40 percent of the time, and Russian and Tamil 35 percent of the time. On average the correct language was one of the top four guesses more than 50 percent of the time.<\/p>\n

The software did even better in choosing between two given languages, such as Spanish and English. In 75 percent of the pairings, the technique predicted between two languages with 70 percent or greater accuracy.<\/p>\n

The researchers suspect that encrypted VOIP might leak even more information. For instance, an attacker might be able to tease out enough information about the voices speaking to tell if a particular person was involved. \u201cI think that in general this technology would only have special purpose applications. But that one-tenth of one-tenth of the time where it can provide a slight advantage can have a lot of value,\u201d Masson says.<\/p>\n","protected":false},"excerpt":{"rendered":"

In the past decade, millions of people have begun to use Voice Over Internet Protocol (VOIP) services that route their telephone calls over the Internet. Because the public nature of the Internet makes eavesdropping relatively easy, VOIP providers are increasingly encrypting the conversations to protect users\u2019 privacy. But the encryption scheme has a weak spot,…<\/p>\n","protected":false},"author":4,"featured_media":1705,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[75],"tags":[],"class_list":["post-1704","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-research-development","issue-winter-2008"],"acf":[],"yoast_head":"\nBeware the Eavesdropper - JHU Engineering Magazine<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Beware the Eavesdropper - JHU Engineering Magazine\" \/>\n<meta property=\"og:description\" content=\"In the past decade, millions of people have begun to use Voice Over Internet Protocol (VOIP) services that route their telephone calls over the Internet. Because the public nature of the Internet makes eavesdropping relatively easy, VOIP providers are increasingly encrypting the conversations to protect users\u2019 privacy. But the encryption scheme has a weak spot,...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/\" \/>\n<meta property=\"og:site_name\" content=\"JHU Engineering Magazine\" \/>\n<meta property=\"article:published_time\" content=\"2008-01-16T22:21:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2014-12-16T22:21:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-content\/uploads\/2014\/07\/eavesdropper.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"343\" \/>\n\t<meta property=\"og:image:height\" content=\"271\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Abby Lattes\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Abby Lattes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/\"},\"author\":{\"name\":\"Abby Lattes\",\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/#\\\/schema\\\/person\\\/0244393be370fbc3ead8ec26062e9742\"},\"headline\":\"Beware the Eavesdropper\",\"datePublished\":\"2008-01-16T22:21:08+00:00\",\"dateModified\":\"2014-12-16T22:21:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/\"},\"wordCount\":612,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/wp-content\\\/uploads\\\/2014\\\/07\\\/eavesdropper.jpg\",\"articleSection\":[\"Research & Development\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/\",\"url\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/\",\"name\":\"Beware the Eavesdropper - JHU Engineering Magazine\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/wp-content\\\/uploads\\\/2014\\\/07\\\/eavesdropper.jpg\",\"datePublished\":\"2008-01-16T22:21:08+00:00\",\"dateModified\":\"2014-12-16T22:21:52+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/#\\\/schema\\\/person\\\/0244393be370fbc3ead8ec26062e9742\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/#primaryimage\",\"url\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/wp-content\\\/uploads\\\/2014\\\/07\\\/eavesdropper.jpg\",\"contentUrl\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/wp-content\\\/uploads\\\/2014\\\/07\\\/eavesdropper.jpg\",\"width\":343,\"height\":271,\"caption\":\"eavesdropper\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/2008\\\/01\\\/beware-eavesdropper\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Beware the Eavesdropper\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/#website\",\"url\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/\",\"name\":\"JHU Engineering Magazine\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/engineering.jhu.edu\\\/magazine-archive\\\/#\\\/schema\\\/person\\\/0244393be370fbc3ead8ec26062e9742\",\"name\":\"Abby Lattes\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c56cb7af5427f847aa288542444ba9ff3d2107bf85dc6c6d44a4d1315608258d?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c56cb7af5427f847aa288542444ba9ff3d2107bf85dc6c6d44a4d1315608258d?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c56cb7af5427f847aa288542444ba9ff3d2107bf85dc6c6d44a4d1315608258d?s=96&r=g\",\"caption\":\"Abby Lattes\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Beware the Eavesdropper - JHU Engineering Magazine","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/","og_locale":"en_US","og_type":"article","og_title":"Beware the Eavesdropper - JHU Engineering Magazine","og_description":"In the past decade, millions of people have begun to use Voice Over Internet Protocol (VOIP) services that route their telephone calls over the Internet. Because the public nature of the Internet makes eavesdropping relatively easy, VOIP providers are increasingly encrypting the conversations to protect users\u2019 privacy. But the encryption scheme has a weak spot,...","og_url":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/","og_site_name":"JHU Engineering Magazine","article_published_time":"2008-01-16T22:21:08+00:00","article_modified_time":"2014-12-16T22:21:52+00:00","og_image":[{"width":343,"height":271,"url":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-content\/uploads\/2014\/07\/eavesdropper.jpg","type":"image\/jpeg"}],"author":"Abby Lattes","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Abby Lattes","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/#article","isPartOf":{"@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/"},"author":{"name":"Abby Lattes","@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/#\/schema\/person\/0244393be370fbc3ead8ec26062e9742"},"headline":"Beware the Eavesdropper","datePublished":"2008-01-16T22:21:08+00:00","dateModified":"2014-12-16T22:21:52+00:00","mainEntityOfPage":{"@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/"},"wordCount":612,"commentCount":0,"image":{"@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/#primaryimage"},"thumbnailUrl":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-content\/uploads\/2014\/07\/eavesdropper.jpg","articleSection":["Research & Development"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/","url":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/","name":"Beware the Eavesdropper - JHU Engineering Magazine","isPartOf":{"@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/#website"},"primaryImageOfPage":{"@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/#primaryimage"},"image":{"@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/#primaryimage"},"thumbnailUrl":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-content\/uploads\/2014\/07\/eavesdropper.jpg","datePublished":"2008-01-16T22:21:08+00:00","dateModified":"2014-12-16T22:21:52+00:00","author":{"@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/#\/schema\/person\/0244393be370fbc3ead8ec26062e9742"},"breadcrumb":{"@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/#primaryimage","url":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-content\/uploads\/2014\/07\/eavesdropper.jpg","contentUrl":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-content\/uploads\/2014\/07\/eavesdropper.jpg","width":343,"height":271,"caption":"eavesdropper"},{"@type":"BreadcrumbList","@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/2008\/01\/beware-eavesdropper\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/engineering.jhu.edu\/magazine-archive\/"},{"@type":"ListItem","position":2,"name":"Beware the Eavesdropper"}]},{"@type":"WebSite","@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/#website","url":"https:\/\/engineering.jhu.edu\/magazine-archive\/","name":"JHU Engineering Magazine","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/engineering.jhu.edu\/magazine-archive\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/engineering.jhu.edu\/magazine-archive\/#\/schema\/person\/0244393be370fbc3ead8ec26062e9742","name":"Abby Lattes","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/c56cb7af5427f847aa288542444ba9ff3d2107bf85dc6c6d44a4d1315608258d?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c56cb7af5427f847aa288542444ba9ff3d2107bf85dc6c6d44a4d1315608258d?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c56cb7af5427f847aa288542444ba9ff3d2107bf85dc6c6d44a4d1315608258d?s=96&r=g","caption":"Abby Lattes"}}]}},"_links":{"self":[{"href":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-json\/wp\/v2\/posts\/1704","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-json\/wp\/v2\/comments?post=1704"}],"version-history":[{"count":2,"href":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-json\/wp\/v2\/posts\/1704\/revisions"}],"predecessor-version":[{"id":2899,"href":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-json\/wp\/v2\/posts\/1704\/revisions\/2899"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-json\/wp\/v2\/media\/1705"}],"wp:attachment":[{"href":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-json\/wp\/v2\/media?parent=1704"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-json\/wp\/v2\/categories?post=1704"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/engineering.jhu.edu\/magazine-archive\/wp-json\/wp\/v2\/tags?post=1704"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}