Please use this identifier to cite or link to this item:
http://hdl.handle.net/1942/34405
Title: | ESQABE: Predicting Encrypted Search Queries | Authors: | MEERS, Isaac DI MARTINO, Mariano QUAX, Peter LAMOTTE, Wim |
Issue Date: | 2021 | Publisher: | Springer | Source: | Jøsang, Audun; Futcher, Lynn; Hagen, Janne (Ed.). ICT Systems Security and Privacy Protection 36th IFIP TC 11 International Conference, SEC 2021, Oslo, Norway, June 22–24, 2021, Proceedings, Springer, p. 103 -117 | Series/Report: | IFIP Advances in Information and Communication Technology | Series/Report no.: | 625 | Abstract: | All popular search engines implement HTTPS to protect the privacy of their users. Unfortunately, HTTPS encryption only covers Application layer headers and information will still leak through side-channels and other protocols used in a conversation between browser and server. This paper presents a novel eavesdropping approach called ESQABE, which combines these sources of information in order to determine what a subject is querying a search engine for in a real-life situation. To achieve this goal, packet length and timing information of the autocomplete functionality are used in combination with the home page contents of the search result links subsequently opened by the user. ESQABE is evaluated by automated tests using realistic search queries and based on real-life behavior. The technique is able to correctly predict the search query in 33% of the cases which is a significant improvement when compared to related work. In 41% of the cases, the correct query was included in the top 3 of most likely predictions. In most other cases no prediction could be made. To better protect the user, we contribute a browser extension that effectively hides the search query for the eavesdropper. The tool not only protects users but also visualizes what information is leaking to an eavesdropper. | Keywords: | Eavesdropping;Privacy;Network security | Document URI: | http://hdl.handle.net/1942/34405 | ISBN: | 978-3-030-78119-4 978-3-030-78120-0 |
DOI: | 10.1007/978-3-030-78120-0_7 | Rights: | The final publication is available at Springer via https://dx.doi.org/10.1007/978-3-030-78120-0_7 | Category: | C1 | Type: | Proceedings Paper | Validations: | vabb 2023 |
Appears in Collections: | Research publications |
Files in This Item:
File | Description | Size | Format | |
---|---|---|---|---|
ESQABE-PostReviewd-Preprint.pdf | Peer-reviewed author version | 417.08 kB | Adobe PDF | View/Open |
Pages from 2021_Book_ICTSystemsSecurityAndPrivacyPr.pdf Restricted Access | Published version | 275.1 kB | Adobe PDF | View/Open Request a copy |
Page view(s)
108
checked on Sep 7, 2022
Download(s)
120
checked on Sep 7, 2022
Google ScholarTM
Check
Altmetric
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.