论文信息 - Oh-Pwn-VPN! Security Analysis of OpenVPN-Based Android Apps

Oh-Pwn-VPN! Security Analysis of OpenVPN-Based Android Apps

Free VPN apps have gained popularity among millions of users due to their convenience, and have been massively used for accessing blocked sites and preventing network eavesdropping. As a popular open-source VPN solution, OpenVPN is widely used by developers to implement their own VPN services. Despite the prevalence of OpenVPN, it can be insecurely customized and deployed by developers in lack of security guide.

[1] Grant Potter. Detailed VPN Comparison Chart , 2017 .

[2] Karl Koscher,et al. vpwns: Virtual Pwned Networks , 2012, FOCI.

[3] Hamed Haddadi,et al. A Glance through the VPN Looking Glass: IPv6 Leakage and DNS Hijacking in Commercial VPN clients , 2015, Proc. Priv. Enhancing Technol..

[4] Karthikeyan Bhargavan,et al. On the Practical (In-)Security of 64-bit Block Ciphers: Collision Attacks on HTTP over TLS and OpenVPN , 2016, CCS.

[5] Zhuoqing Morley Mao,et al. The Misuse of Android Unix Domain Sockets and Security Implications , 2016, CCS.

[6] Narseo Vallina-Rodriguez,et al. An Analysis of the Privacy and Security Risks of Android VPN Permission-enabled Apps , 2016, Internet Measurement Conference.