25th USENIX Security Symposium has ended
Back To Schedule
Monday, August 8 • 11:00am - 11:30am
DNS-sly: Avoiding Censorship through Network Complexity

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

We design DNS-sly, a counter-censorship system which enables a covert channel between a DNS client and server. To achieve covertness and deniability in the upstream direction, DNS-sly applies user personalization, adapting to individual behaviors. In the downstream direction, it utilizes CDN-related DNS responses to embed data, while retaining statistical covertness. We show DNS-sly achieves downstream throughput of up to 600 Bytes of raw hidden data per click on a regular Web page, making it a practical system in the context of a covert Web proxy service. We implement DNS-sly and evaluate it in a known censorship environment, demonstrating its real-world usability.

Monday August 8, 2016 11:00am - 11:30am PDT
Texas Ballroom 5-7

Attendees (1)