Tunneling through DNS over TLS providers

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F63839172%3A_____%2F22%3A10133484" target="_blank" >RIV/63839172:_____/22:10133484 - isvavai.cz</a>
Alternative codes found
RIV/68407700:21240/22:00361419
Result on the web
<a href="https://ieeexplore.ieee.org/document/9964617" target="_blank" >https://ieeexplore.ieee.org/document/9964617</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.23919/CNSM55787.2022.9964617" target="_blank" >10.23919/CNSM55787.2022.9964617</a>

Result language
angličtina
Original language name
Tunneling through DNS over TLS providers
Original language description
DNS over TLS (DoT) is one of the approaches for private DNS resolution, which has already gained support by open resolvers. Moreover, DoT is used by default in Android operating systems. This study investigates the possibility of creating DNS covert channels using DoT, which is a security threat that benefits from the increased privacy of encrypted communication. We evaluated the performance and usability of DoT tunnels created via commonly used resolvers. Our results show that the performance characteristics of DoT tunnels differ vastly depending on the used DoT resolver; however, the creation of a DoT tunnel is possible, reaching speeds up to 232 Kbps. Moreover, we successfully transferred data via DoT servers claiming Anti-Virus protection and family-friendly content.
Czech name
—
Czech description
—

Project
<a href="/en/project/VJ02010024" target="_blank" >VJ02010024: Flow-based Encrypted Traffic Analysis</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year
2022
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Similar results(10)