Evaluating the Security of a DNS Query Obfuscation Scheme for Private Web Surfing - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

Evaluating the Security of a DNS Query Obfuscation Scheme for Private Web Surfing

Résumé

The Domain Name System (DNS) does not provide query privacy. Query obfuscation schemes have been proposed to overcome this limitation, but, so far, they have not been evaluated in a realistic setting. In this paper we evaluate the security of a random set range query scheme in a real-world web surfing scenario. We demonstrate that the scheme does not sufficiently obfuscate characteristic query patterns, which can be used by an adversary to determine the visited websites. We also illustrate how to thwart the attack and discuss practical challenges. Our results suggest that previously published evaluations of range queries may give a false sense of the attainable security, because they do not account for any interdependencies between queries.
Fichier principal
Vignette du fichier
978-3-642-55415-5_17_Chapter.pdf (4 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01370367 , version 1 (22-09-2016)

Licence

Paternité

Identifiants

Citer

Dominik Herrmann, Max Maass, Hannes Federrath. Evaluating the Security of a DNS Query Obfuscation Scheme for Private Web Surfing. 29th IFIP International Information Security Conference (SEC), Jun 2014, Marrakech, Morocco. pp.205-219, ⟨10.1007/978-3-642-55415-5_17⟩. ⟨hal-01370367⟩
90 Consultations
96 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More