Pine: Enabling privacy-preserving deep packet inspection on TLS with rule-hiding and fast connection establishment

• Main Authors: NING, Jianting, HUANG, Xinyi, POH, Geong Sen, XU, Shengmin, LOH, Jia-Chng, WENG, Jain, DENG, Robert H.
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2020
• Subjects: Network privacy; Traffic inspection; Encrypted traffic; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/5925; https://ink.library.smu.edu.sg/context/sis_research/article/6928/viewcontent/PineEnablingPrivacy_Preserving_av.pdf
• Institution: Singapore Management University

Transport Layer Security Inspection (TLSI) enables enterprises to decrypt, inspect and then re-encrypt users’ traffic before it is routed to the destination. This breaks the end-to-end security guarantee of the TLS specification and implementation. It also raises privacy concerns since users’ traffi...