HTTPS 웹 사이트 차단의 익명성 제공 방안 연구
Study on Providing Anonymity of HTTPS Web Site Blocking
0
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
As the number of harmful sites increases, many social problems are occurring. Therefore, in order to solve this problem, the government is carrying out activities to block access to web sites to harmful sites based on the law. However, due to the change from HTTP to HTTPS protocol, it has become difficult to block the harmful sites in the existing method. In the existing HTTP protocol, a method of blocking the site corresponding to the harmful site domain list by utilizing the DNS information was used. However, due to the generalization of HTTPS, it is difficult to block the harmful sites in the existing method. Therefore, the ISP uses the method of blocking the website using the SNI field in the TLS (Transport Layer Security) Handshake protocol used for HTTPS. However, since the method using SNI field raises the concern of monitoring Internet users or exposing information about connected sites, in this paper, we proposed method which can support anonymity to Internet users while blocking harmful sites. The suggested method also can support integrity and source authentication to the transmitted data.
Abstract
As the number of harmful sites increases, many social problems are occurring. Therefore, in order to solve this problem, the government is carrying out activities to block access to web sites to harmful sites based on the law. However, due to the change from HTTP to HTTPS protocol, it has become difficult to block the harmful sites in the existing method. In the existing HTTP protocol, a method of blocking the site corresponding to the harmful site domain list by utilizing the DNS information was used. However, due to the generalization of HTTPS, it is difficult to block the harmful sites in the existing method. Therefore, the ISP uses the method of blocking the website using the SNI field in the TLS (Transport Layer Security) Handshake protocol used for HTTPS. However, since the method using SNI field raises the concern of monitoring Internet users or exposing information about connected sites, in this paper, we proposed method which can support anonymity to Internet users while blocking harmful sites. The suggested method also can support integrity and source authentication to the transmitted data.
참고문헌 (11)
- Mathrani, Anuradha, "Website Blocking Across Ten Countries: A Snapshot", PACIS, pp.152~ (2010)
- Danaher, Brett, "The effect of piracy website blocking on consumer behavior", SSRN 2612063, ~ (2018)
- 윤여생, "불법유해정보 법ㆍ제도 동향 분석", 정보보호학회지, 22(3), pp.25~36 (2012)
- 최미정, "HTTP 트래픽의 클라이언트측 어플리케이션별 분류", 한국통신학회논문지B, 36(11), pp.1277~1284 (2011), 한국통신학회
- 김성민, "SSL", TLS 기반 암호화 트래픽의 서비스 식별 방법, 2015, pp.40(11), 2160~2168[DOI]
- tran song dat phuc, "New Security Approaches for SSL", TLS Attacks Resistance in Practice, 2017, pp.22(2), 169~185[DOI]
- Rescorla, Eric, "The transport layer security (TLS) protocol version 1.3. No. RFC 8446", ~ (2018)
- 김광섭, "DNS 정보 검색 연동 기법을 이용한 침해 사고 예방 시스템 설계", 한국정보통신학회논문지, 16(9), pp.1955~1962 (2012), 한국정보통신학회[DOI]
- Shbair, Wazen M., "Efficiently bypassing SNI-based HTTPS filtering", 2015 IFIP, 2015, 990~995[DOI]
- Shbair, Wazen M., "Improving sni-based https security monitoring", 2016 IEEE 36th International Conference on Distributed Computing Systems Workshops, pp.72~77 (2016), IEEE
- Hoffman, P., "Dns queries over https (doh). No. RFC 8484", ~ (2018)