ESQABE: Predicting Encrypted Search Queries - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

ESQABE: Predicting Encrypted Search Queries

Isaac Meers
  • Fonction : Auteur
  • PersonId : 1154389
Mariano Di Martino
  • Fonction : Auteur
Peter Quax
  • Fonction : Auteur
Wim Lamotte
  • Fonction : Auteur

Résumé

All popular search engines implement HTTPS to protect the privacy of their users. Unfortunately, HTTPS encryption only covers Application layer headers and information will still leak through side-channels and other protocols used in a conversation between browser and server. This paper presents a novel eavesdropping approach called ESQABE, which combines these sources of information in order to determine what a subject is querying a search engine for in a real-life situation. To achieve this goal, packet length and timing information of the autocomplete functionality are used in combination with the home page contents of the search result links subsequently opened by the user. ESQABE is evaluated by automated tests using realistic search queries and based on real-life behavior. The technique is able to correctly predict the search query in 33% of the cases which is a significant improvement when compared to related work. In 41% of the cases, the correct query was included in the top 3 of most likely predictions. In most other cases no prediction could be made. To better protect the user, we contribute a browser extension that effectively hides the search query for the eavesdropper. The tool not only protects users but also visualizes what information is leaking to an eavesdropper.
Fichier principal
Vignette du fichier
512098_1_En_7_Chapter.pdf (415.47 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03746030 , version 1 (04-08-2022)

Licence

Paternité

Identifiants

Citer

Isaac Meers, Mariano Di Martino, Peter Quax, Wim Lamotte. ESQABE: Predicting Encrypted Search Queries. 36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.103-117, ⟨10.1007/978-3-030-78120-0_7⟩. ⟨hal-03746030⟩
18 Consultations
7 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More