How Private is Android's Private DNS Setting? Identifying Apps by Encrypted DNS Traffic

This repository contains the source code and datasets for the paper "How Private is Android's Private DNS Setting? Identifying Apps by Encrypted DNS Traffic". Our paper will appear in the Proceedings of The 16th International Conference on Availability, Reliability and Security (ARES 2021).

A preprint is available on arxiv: https://arxiv.org/abs/2106.14058

The paper is now also available in the digital library of ACM (https://doi.org/10.1145/3465481.3465764).

If you use our datasets or findings from the paper, we would appreciate a citation for the paper:

@inproceedings{DBLP:conf/IEEEares/MuhlhauserPH21,
  author    = {Michael M{\"{u}}hlhauser and
               Henning Prid{\"{o}}hl and
               Dominik Herrmann},
  editor    = {Delphine Reinhardt and
               Tilo M{\"{u}}ller},
  title     = {How Private is Android's Private {DNS} Setting? Identifying Apps by
               Encrypted {DNS} Traffic},
  booktitle = {{ARES} 2021: The 16th International Conference on Availability, Reliability
               and Security, Vienna, Austria, August 17-20, 2021},
  pages     = {14:1--14:10},
  publisher = {{ACM}},
  year      = {2021},
  biburl    = {https://dblp.org/rec/conf/IEEEares/MuhlhauserPH21.bib},
}

The directory...

• classification/ contains Jupyter Notebooks to reproduce the results.

• data/ contains the SQL Dump of the PostgreSQL database (only the DoT/DoH data)

• database/ contains the database configuration for DNS fingerprinting and the script that is used to parse the PCAP files

• phone/ contains the implementation that was used to instrument the Android smartphone

• tests/ containts some tests to check parts of the code

Classification Results

1. Install Requirements

To get started install the packages from the pipfile.

pipenv install

2. Load the SQL Dump:

2.1 Install PostgreSQL

sudo apt install postgresql postgresql-client

2.2 Set Password for User postgres

sudo -u postgres psql 

\password postgres  

2.3 Create User

sudo -u postgres createuser -P -d USERNAME 

2.4 Create Database

sudo -u postgres createdb -O USERNAME DATABASENAME 

2.5 Load Database from SQL Dump

psql DATABASENAME < ./data/encdnsdata.sql 

3. Connect to your Database.

• create the config.py file in the database/ directory. An example is given here and in the example_config.py file.

DATABASE_URI = 'postgresql://username:password@localhost:5432/dbname'

4. Run the Jupyter Notebook inside the Virtual Environment

pipenv run jupyter notebook