ESQABE: Predicting Encrypted Search Queries - ICT Systems Security and Privacy Protection Access content directly
Conference Papers Year : 2021

ESQABE: Predicting Encrypted Search Queries

Isaac Meers
  • Function : Author
  • PersonId : 1154389
Mariano Di Martino
  • Function : Author
Peter Quax
  • Function : Author
Wim Lamotte
  • Function : Author

Abstract

All popular search engines implement HTTPS to protect the privacy of their users. Unfortunately, HTTPS encryption only covers Application layer headers and information will still leak through side-channels and other protocols used in a conversation between browser and server. This paper presents a novel eavesdropping approach called ESQABE, which combines these sources of information in order to determine what a subject is querying a search engine for in a real-life situation. To achieve this goal, packet length and timing information of the autocomplete functionality are used in combination with the home page contents of the search result links subsequently opened by the user. ESQABE is evaluated by automated tests using realistic search queries and based on real-life behavior. The technique is able to correctly predict the search query in 33% of the cases which is a significant improvement when compared to related work. In 41% of the cases, the correct query was included in the top 3 of most likely predictions. In most other cases no prediction could be made. To better protect the user, we contribute a browser extension that effectively hides the search query for the eavesdropper. The tool not only protects users but also visualizes what information is leaking to an eavesdropper.
Fichier principal
Vignette du fichier
512098_1_En_7_Chapter.pdf (415.47 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03746030 , version 1 (04-08-2022)

Licence

Attribution

Identifiers

Cite

Isaac Meers, Mariano Di Martino, Peter Quax, Wim Lamotte. ESQABE: Predicting Encrypted Search Queries. 36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.103-117, ⟨10.1007/978-3-030-78120-0_7⟩. ⟨hal-03746030⟩
16 View
6 Download

Altmetric

Share

Gmail Facebook X LinkedIn More