<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01202712</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-20T00:47:42+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Efficiently Bypassing SNI-based HTTPS Filtering</title>
            <author role="crp">
              <persName>
                <forename type="first">Wazen</forename>
                <surname>M. Shbair</surname>
              </persName>
              <email type="md5">f84f9e11808a0a9d865c628a0d52629c</email>
              <email type="domain">loria.fr</email>
              <idno type="idhal" notation="numeric">970544</idno>
              <idno type="halauthorid" notation="string">946284-970544</idno>
              <affiliation ref="#struct-205122"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Thibault</forename>
                <surname>Cholez</surname>
              </persName>
              <email type="md5">2e4f4655d846953fdff4a3b2c639120c</email>
              <email type="domain">gmail.com</email>
              <idno type="idhal" notation="string">cholez</idno>
              <idno type="idhal" notation="numeric">821</idno>
              <idno type="halauthorid" notation="string">18247-821</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-0435-3909</idno>
              <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?user=1ikhuOMAAAAJ</idno>
              <affiliation ref="#struct-205122"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Antoine</forename>
                <surname>Goichot</surname>
              </persName>
              <idno type="halauthorid">878297-0</idno>
              <affiliation ref="#struct-205122"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Isabelle</forename>
                <surname>Chrisment</surname>
              </persName>
              <idno type="halauthorid">22664-0</idno>
              <affiliation ref="#struct-205122"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Wazen</forename>
                <surname>Shbair</surname>
              </persName>
              <email type="md5">f84f9e11808a0a9d865c628a0d52629c</email>
              <email type="domain">loria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2015-12-03 17:08:45</date>
              <date type="whenWritten">2014-08</date>
              <date type="whenModified">2025-11-04 12:02:46</date>
              <date type="whenReleased">2016-05-12 17:02:14</date>
              <date type="whenProduced">2015-05-11</date>
              <date type="whenEndEmbargoed">2015-09-21</date>
              <ref type="file" target="https://inria.hal.science/hal-01202712v1/document">
                <date notBefore="2015-09-21"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01202712v1/file/IM2015-Camera-Ready.pdf" id="file-1235462-1315886">
                <date notBefore="2015-09-21"/>
              </ref>
              <ref type="annex" n="0" target="https://inria.hal.science/hal-01202712v1/file/Im2015-Presentation-Slides.pdf" id="file-1235462-1315887">
                <date notBefore="2015-11-30"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="310226">
                <persName>
                  <forename>Wazen</forename>
                  <surname>Shbair</surname>
                </persName>
                <email type="md5">f84f9e11808a0a9d865c628a0d52629c</email>
                <email type="domain">loria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01202712</idno>
            <idno type="halUri">https://inria.hal.science/hal-01202712</idno>
            <idno type="halBibtex">mshbair:hal-01202712</idno>
            <idno type="halRefHtml">&lt;i&gt;IFIP/IEEE International Symposium on Integrated Network Management (IM 2015)&lt;/i&gt;, May 2015, Ottawa, Canada. pp.990-995, &lt;a target="_blank" href="https://dx.doi.org/10.1109/INM.2015.7140423"&gt;&amp;#x27E8;10.1109/INM.2015.7140423&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">IFIP/IEEE International Symposium on Integrated Network Management (IM 2015), May 2015, Ottawa, Canada. pp.990-995, &amp;#x27E8;10.1109/INM.2015.7140423&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-1235462-1315886"/><ref corresp="#file-1235462-1315887"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="INRIA_TEST">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="LORIA2">Publications du LORIA</idno>
            <idno type="stamp" n="INRIA-NANCY-GRAND-EST">INRIA Nancy - Grand Est</idno>
            <idno type="stamp" n="TESTALAIN1">TESTALAIN1</idno>
            <idno type="stamp" n="CENTRALESUPELEC">Ecole CentraleSupélec</idno>
            <idno type="stamp" n="UNIV-LORRAINE">Université de Lorraine</idno>
            <idno type="stamp" n="INRIA2">INRIA 2</idno>
            <idno type="stamp" n="LORIA">Laboratoire Lorrain de Recherche en Informatique et ses Applications</idno>
            <idno type="stamp" n="LORIA-NSS" corresp="LORIA">Department of Networks, Systems and Services</idno>
            <idno type="stamp" n="UNIV-PARIS-SACLAY">Université Paris-Saclay</idno>
            <idno type="stamp" n="CENTRALESUPELEC-SACLAY" corresp="UNIV-PARIS-SACLAY">CENTRALESUPELEC-SACLAY</idno>
            <idno type="stamp" n="LHS">Laboratoire de Haute Sécurité - Inria Nancy</idno>
            <idno type="stamp" n="AM2I-UL">Pôle scientifique Automatique, Mathématiques, Informatique et leurs Intéractions de l'Université de Lorraine</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Efficiently Bypassing SNI-based HTTPS Filtering</title>
                <author role="crp">
                  <persName>
                    <forename type="first">Wazen</forename>
                    <surname>M. Shbair</surname>
                  </persName>
                  <email type="md5">f84f9e11808a0a9d865c628a0d52629c</email>
                  <email type="domain">loria.fr</email>
                  <idno type="idhal" notation="numeric">970544</idno>
                  <idno type="halauthorid" notation="string">946284-970544</idno>
                  <affiliation ref="#struct-205122"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Thibault</forename>
                    <surname>Cholez</surname>
                  </persName>
                  <email type="md5">2e4f4655d846953fdff4a3b2c639120c</email>
                  <email type="domain">gmail.com</email>
                  <idno type="idhal" notation="string">cholez</idno>
                  <idno type="idhal" notation="numeric">821</idno>
                  <idno type="halauthorid" notation="string">18247-821</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-0435-3909</idno>
                  <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?user=1ikhuOMAAAAJ</idno>
                  <affiliation ref="#struct-205122"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Antoine</forename>
                    <surname>Goichot</surname>
                  </persName>
                  <idno type="halauthorid">878297-0</idno>
                  <affiliation ref="#struct-205122"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Isabelle</forename>
                    <surname>Chrisment</surname>
                  </persName>
                  <idno type="halauthorid">22664-0</idno>
                  <affiliation ref="#struct-205122"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>IFIP/IEEE International Symposium on Integrated Network Management (IM 2015)</title>
                  <date type="start">2015-05-11</date>
                  <date type="end">2015-05-15</date>
                  <settlement>Ottawa</settlement>
                  <country key="CA">Canada</country>
                </meeting>
                <imprint>
                  <biblScope unit="pp">990-995</biblScope>
                  <date type="datePub">2015-05</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1109/INM.2015.7140423</idno>
              <ref type="publisher">http://im2015.ieee-im.org/</ref>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en"> firewall</term>
                <term xml:lang="en"> HTTPS</term>
                <term xml:lang="en">TLS</term>
                <term xml:lang="en"> monitoring</term>
                <term xml:lang="en"> security</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-ni">Computer Science [cs]/Networking and Internet Architecture [cs.NI]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Encrypted Internet traffic is an essential element to enable security and privacy in the Internet. Surveys show that websites are more and more being served over HTTPS. They highlight an increase of 48% of sites using TLS over the past year, justifying the tendency that the Web is going to be encrypted. This motivates the development of new tools and methods to monitor and filter HTTPS traffic. This paper handles the latest technique for HTTPS traffic filtering that is based on the Server Name Indication (SNI) field of TLS and which has been recently implemented in many firewall solutions. Our main contribution is an evaluation of the reliability of this SNI extension for properly identifying and filtering HTTPS traffic. We show that SNI has two weaknesses, regarding (1) backward compatibility and (2) multiple services using a single certificate. We demonstrate thanks to a web browser plug-in called " Escape " that we designed and implemented, how these weaknesses can be practically used to bypass firewalls and monitoring systems relying on SNI. The results show positive evaluation (firewall's rules successfully bypassed) for all tested websites.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-205122" status="OLD">
          <idno type="RNSR">200418297A</idno>
          <orgName>Management of dynamic networks and services</orgName>
          <orgName type="acronym">MADYNES</orgName>
          <date type="start">2004-01-01</date>
          <date type="end">2017-12-31</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/equipes/madynes</ref>
          </desc>
          <listRelation>
            <relation active="#struct-129671" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-423085" type="direct"/>
            <relation active="#struct-206040" type="indirect"/>
            <relation active="#struct-411575" type="indirect"/>
            <relation active="#struct-413289" type="indirect"/>
            <relation name="UMR7503" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-129671" status="VALID">
          <idno type="RNSR">198618246Y</idno>
          <idno type="ROR">https://ror.org/03fcjvn64</idno>
          <orgName>Centre Inria de l'Université de Lorraine</orgName>
          <desc>
            <address>
              <addrLine>615 rue du Jardin Botanique 54600 Villers-lès-Nancy</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/nancy</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="department" xml:id="struct-423085" status="VALID">
          <orgName>Department of Networks, Systems and Services</orgName>
          <orgName type="acronym">LORIA - NSS</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.loria.fr/en/research/departments/networks-systems-and-services/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-206040" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-411575" type="indirect"/>
            <relation active="#struct-413289" type="indirect"/>
            <relation name="UMR7503" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-206040" status="VALID">
          <idno type="IdRef">067077927</idno>
          <idno type="ISNI">0000000121795429</idno>
          <idno type="RNSR">198912571S</idno>
          <idno type="IdUnivLorraine">[UL]RSI--</idno>
          <idno type="ROR">https://ror.org/02vnf0c38</idno>
          <orgName>Laboratoire Lorrain de Recherche en Informatique et ses Applications</orgName>
          <orgName type="acronym">LORIA</orgName>
          <date type="start">2012-01-01</date>
          <desc>
            <address>
              <addrLine>Campus Scientifique BP 239 54506 Vandoeuvre-lès-Nancy Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.loria.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
            <relation active="#struct-411575" type="direct"/>
            <relation active="#struct-413289" type="direct"/>
            <relation name="UMR7503" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-411575" status="VALID">
          <idno type="IdRef">184443237</idno>
          <idno type="ROR">https://ror.org/019tcpt25</idno>
          <orgName>CentraleSupélec</orgName>
          <desc>
            <address>
              <addrLine>3, rue Joliot Curie,Plateau de Moulon,91192 GIF-SUR-YVETTE Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.centralesupelec.fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-413289" status="VALID">
          <idno type="IdRef">157040569</idno>
          <idno type="IdUnivLorraine">[UL]100--</idno>
          <idno type="ROR">https://ror.org/04vfs2w97</idno>
          <orgName>Université de Lorraine</orgName>
          <orgName type="acronym">UL</orgName>
          <date type="start">2012-01-01</date>
          <desc>
            <address>
              <addrLine>34 cours Léopold - CS 25233 - 54052 Nancy cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-lorraine.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>