基于DNS缓存窥探的VPN审查规避分析
Analysing Censorship Circumvention with VPNs via DNS Cache Snooping
摘要：
传闻证据表明，越来越多的人转向VPN服务，以获得隐私，匿名和通过互联网自由通信的特性。尽管如此，很少有人研究这些服务实际上被用于什么。我们使用DNS缓存窥探来确定人们通过VPN访问的域。此技术用于发现是否针对特定DNS服务器进行了某些查询。一些VPN运行自己的DNS服务器，确保任何缓存查询都是由VPN用户进行的。我们将探讨3种DNS缓存侦听方法，并简要讨论它们的优点和局限性。使用最可靠的方法，我们对几个主要VPN提供商的DNS服务器执行DNS缓存窥探扫描。有了这个，我们发现哪些域实际上通过VPN访问。我们对流行的域名以及在某些国家（中国，印度尼西亚，伊朗和土耳其）被审查的域名运行这种技术。我们的工作让用户可以一窥VPN的用途，并提供了一种发现DNS服务器上访问域记录的频率的技术。
英文摘要：
Anecdotal evidence suggests an increasing number of people are turning to VPN services for the properties of privacy, anonymity and free communication over the internet. Despite this, there is little research into what these services are actually being used for. We use DNS cache snooping to determine what domains people are accessing through VPNs. This technique is used to discover whether certain queries have been made against a particular DNS server. Some VPNs operate their own DNS servers, ensuring that any cached queries were made by users of the VPN. We explore 3 methods of DNS cache snooping and briefly discuss their strengths and limitations. Using the most reliable of the methods, we perform a DNS cache snooping scan against the DNS servers of several major VPN providers. With this we discover which domains are actually accessed through VPNs. We run this technique against popular domains, as well as those known to be censored in certain countries; China, Indonesia, Iran, and Turkey. Our work gives a glimpse into what users use VPNs for, and provides a technique for discovering the frequency with which domain records are accessed on a DNS server.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
