Towards a Comprehensive Picture of the Great Firewall’s DNS Censorship

Authors: 

Anonymous

Abstract: 

China's Great Firewall passively inspects network traffic and disrupts unwanted communication by injecting forged DNS replies or TCP resets. We attempted to comprehensively examine the structure of the DNS injector, using queries from both within and outside China. Using these probes, we were able to localize the DNS monitors' locations, extract the firewall's DNS blacklist of approximately 15,000 keywords, and estimate the cluster structure and active response rate by utilizing an information leakage in the Great Firewall's design.

Open Access Media

USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.

BibTeX
@inproceedings {185061,
title = {{ Towards} a Comprehensive Picture of the Great {Firewall{\textquoteright}s} {DNS} Censorship},
booktitle = {4th USENIX Workshop on Free and Open Communications on the Internet (FOCI 14)},
year = {2014},
address = {San Diego, CA},
url = {https://www.usenix.org/conference/foci14/workshop-program/presentation/anonymous},
publisher = {USENIX Association},
month = aug
}
Download
Anonymous

Presentation Video 

Presentation Audio