[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-141717-105":3,"detail-sidebar-cat-0-en-105":81,"doc-detail-141717-en":130},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","raven-stateless-rapid-ip-address-variation-for-enterprise-networks-protecting-client-privacy-via-stateless-ip-changes","RAVEN - Stateless Rapid IP Address Variation for Enterprise Networks - Protecting Client Privacy via Stateless IP Changes","","Enterprise networks face growing threats to client privacy through IP-based identification and traffic analysis. Existing approaches such as NAT provide limited protection while requiring per-flow state, and even flow-level anonymization can fail against connection-level grouping and webpage fingerprinting. RAVEN (Rapid Address Variation for Enterprise Networks) is a network-based privacy solution that rapidly and unpredictably changes clients’ public IP addresses. It breaks packet association within a single connection using QUIC-based seamless migration and stateless line-rate address changes in programmable switches, reducing adversarial attack precision against webpage fingerprinting.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/research-report/","Research & Report",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/raven-stateless-rapid-ip-address-variation-for-enterprise-networks-protecting-client-privacy-via-stateless-ip-changes/141717/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/raven-stateless-rapid-ip-address-variation-for-enterprise-networks-protecting-client-privacy-via-stateless-ip-changes/141717.png","ImageObject",300,407,{"name":42,"@type":43},"Cipher","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-09-18","2026-08-25",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",7,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What problem does RAVEN address in enterprise networks?","Question",{"text":63,"@type":64},"RAVEN addresses privacy threats where clients can be identified and tracked using public IPs and traffic patterns, enabling attacks such as webpage fingerprinting and traffic analysis grouping.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"How does RAVEN improve on NAT and related techniques?",{"text":68,"@type":64},"RAVEN changes IP addresses rapidly and can break packet association within a single connection, doing so statelessly at line rate, instead of relying on per-flow state like traditional NAT-style defenses.",{"name":70,"@type":61,"acceptedAnswer":71},"What role do QUIC and programmable switches play in RAVEN?",{"text":72,"@type":64},"QUIC is used by the client to support seamless connection migration, while enterprise programmable switches perform stateless IP changes and ensure end-to-end packet delivery.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},141717,1787663412,{"code":4,"msg":82,"data":83},"success",[84,88,92,96,101,106,110,114,119,122,126],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":85,"show_sort_weight":86,"slug":87},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":89,"show_sort_weight":90,"slug":91},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":93,"show_sort_weight":94,"slug":95},"Exam",70,"exam",{"id":97,"doc_module":4,"doc_module_name":25,"category_name":98,"show_sort_weight":99,"slug":100},5,"Comic",60,"comic",{"id":102,"doc_module":4,"doc_module_name":25,"category_name":103,"show_sort_weight":104,"slug":105},6,"Technology",50,"technology",{"id":55,"doc_module":4,"doc_module_name":25,"category_name":107,"show_sort_weight":108,"slug":109},"Healthcare",40,"healthcare",{"id":111,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":112,"slug":113},8,30,"research-report",{"id":115,"doc_module":4,"doc_module_name":25,"category_name":116,"show_sort_weight":117,"slug":118},9,"Religion & Spirituality",20,"religion-spirituality",{"id":117,"doc_module":4,"doc_module_name":25,"category_name":120,"show_sort_weight":117,"slug":121},"World Cup","world-cup",{"id":123,"doc_module":4,"doc_module_name":25,"category_name":124,"show_sort_weight":123,"slug":125},10,"Lifestyle","lifestyle",{"id":127,"doc_module":4,"doc_module_name":25,"category_name":128,"show_sort_weight":97,"slug":129},19,"General","general",{"code":4,"msg":82,"data":131},{"doc_id":79,"user_id":132,"nickname":42,"user_avatar":133,"doc_module":4,"category_id":111,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":139,"language":140,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":12,"update_tm":80,"read_time":144},687208528416,"https://ap-avatar.wpscdn.com/davatar_9964176cb1d06d4a9deccf72a44ae3dc","RAVEN: Stateless Rapid IP Address Variation for Enterprise  \nNetworks  \nLiang Wang Princeton University [lw19@princeton.edu](lw19@princeton.edu)  \nHyojoon Kim  \nPrinceton University [hyojoonk@cs.princeton.edu](hyojoonk@cs.princeton.edu)  \nPrateek Mittal  \nPrinceton University [pmittal@princeton.edu](pmittal@princeton.edu)  \nJennifer Rexford Princeton University [jrex@cs.princeton.edu](jrex@cs.princeton.edu)  \nABSTRACT  \nEnterprise networks face increasing threats against the privacy of their clients. Existing enterprise services like Network Address Translation (NAT) offer limited privacy protection, at the cost of requiring per-flow state. In this paper, we introduce RAVEN (Rapid Address Variation for Enterprise Networks), a network-based privacy solution that is complementary to application-layer defenses. RAVEN protects privacy by frequently changing the client’s public IP address. With RAVEN, a client is not limited to using a single IP address at a given time, or even for a given connection. RAVEN goes further, breaking the association between packets that belong to the same connection by frequently changing the client’s IP address within a single connection. RAVEN achieves this through a novel division of labor: the client uses a transport protocol, like QUIC, that supports seamless connection migration, and decides when to switch its IP address, while the enterprise network actually changes the client’s IP address in a stateless manner at line rate and ensures end-to-end packet delivery. We implement RAVEN using QUIC and off-the-shelf programmable switches. We deploy RAVEN in a test IPv6 network and evaluate its defense against webpage fingerprinting attacks. Even with a strong adversary, the average precision of the best adaptive attacks drops from 0.96 to 0.84, with a 0.5% degradation in client throughput. When RAVEN changes IP addresses at unpredictable frequency, the precision of the best attacks falls to 0 . 78—the same effectiveness as WTF-PAD.  \nKEYWORDS  \nprivacy, traffic analysis, programmable data plane, P4, QUIC  \n1 INTRODUCTION  \nClients in an enterprise network (e.g., campus, corporate, or access network) are exposed to many attacks that threaten their privacy in today’s connected world. For example, an Internet Protocol (IP) address can be used to identify a client and device communicating on the Internet, enabling client activity and location tracking [13, 27, 42, 48, 53, 69–71, 73] . The problem will become more severe as enterprise networks adopt IPv6, where each client may get a  \nThis work is licensed under the Creative Commons Attribution 4.0 International License. To view a copy of this license visit [https://creativecommons.org/licenses/by/4.0/ or](https://creativecommons.org/licenses/by/4.0/ or) send a  \nletter to Creative Commons, PO Box 1866, Mountain View, CA 94042, USA. Proceedings on Privacy Enhancing Technologies 2023(3), 194–210  \n© 2023 Copyright held by the owner/author(s) . [https://doi.org/10.56553/popets-2023-0077](https://doi.org/10.56553/popets-2023-0077)  \npersistent, publicly-routable IPv6 address that makes it easier for an adversary to locate a client and analyze its traffic [13, 27, 53] .  \nHow can an enterprise network protect the privacy of its clients? Most solutions today are client-driven. For example, clients can use services like Tor [16]. Apple also launched the iCloud Private Relay service [3], enabling Apple device users to protect their privacy by directing their traffic through two or more private relays. However, Private Relay cannot be applied to clients that do not allow much customization or control, such as Internet-of-Things devices.  \nCan an enterprise network play a more active role and provide a fundamental solution that is less client-or device-dependent? A common practice is Network Address Translation (NAT) which can change IPs per client (or even per flow) . Address Hiding Protocol (AHP) [49] and Lightweight Anonymity and Privacy (LAP) [32] improve on NA","cbCaiclwoBhlxwHw","https://ap.wps.com/l/cbCaiclwoBhlxwHw","pdf",1295558,17,"English","# Introduction\n## Client privacy threats in enterprise networks\n## Limits of existing solutions (NAT, Tor, iCloud Private Relay)\n## Connection- and packet-level unlinkability motivation\n# RAVEN approach\n## Stateless rapid IP address variation\n## Division of labor with QUIC and programmable switches\n# Implementation and evaluation\n## Test IPv6 deployment\n## Defense against webpage fingerprinting","[{\"question\":\"What problem does RAVEN address in enterprise networks?\",\"answer\":\"RAVEN addresses privacy threats where clients can be identified and tracked using public IPs and traffic patterns, enabling attacks such as webpage fingerprinting and traffic analysis grouping.\"},{\"question\":\"How does RAVEN improve on NAT and related techniques?\",\"answer\":\"RAVEN changes IP addresses rapidly and can break packet association within a single connection, doing so statelessly at line rate, instead of relying on per-flow state like traditional NAT-style defenses.\"},{\"question\":\"What role do QUIC and programmable switches play in RAVEN?\",\"answer\":\"QUIC is used by the client to support seamless connection migration, while enterprise programmable switches perform stateless IP changes and ensure end-to-end packet delivery.\"}]","RAVEN - Stateless Rapid IP Address Variation for Enterprise Networks - Protecting Client Privacy via Stateless IP Changes | PDF",43]