{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T15:15:29Z","timestamp":1783610129652,"version":"3.55.0"},"reference-count":114,"publisher":"Association for Computing Machinery (ACM)","issue":"13s","license":[{"start":{"date-parts":[[2023,7,13]],"date-time":"2023-07-13T00:00:00Z","timestamp":1689206400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Higher Education Commission (HEC), Pakistan through its initiative of the National Cyber Security Auditing and Evaluation Lab","award":["2(1078)\/HEC\/ME\/2018\/707"],"award-info":[{"award-number":["2(1078)\/HEC\/ME\/2018\/707"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Comput. Surv."],"published-print":{"date-parts":[[2023,12,31]]},"abstract":"<jats:p>The use of Virtual Private Networks (VPNs) has witnessed an outstanding rise as they aim to provide confidentiality and anonymity to communication. Despite this enormous and ubiquitous usage, VPNs come with various security, misconfiguration, and performance related issues thereby hindering the users to take maximum advantage of this revolutionary technology. To address this concern, VPN users must choose the most secure and perfect VPN solution for the smooth functioning of daily life activities. Generally, no clear set of directions is available for assisting a common VPN user thereby accentuating the need to develop an elucidated and coherent checklist that thoroughly helps in evaluating any VPN based on its security, performance, auditing, and management function. This research comprehensively surveys VPN technologies, its features, working principles, and compliance principles that evolved over the last two decades. Based on it, this research presents a new methodology in the form of a feature-enriched template to comprehensively analyze a VPN solution. Each VPN feature is given its score against the potential damage it may cause in case of failure and the probability of occurrence of that failure. In this way, the corporate sector and individual users can quantitatively and qualitatively grade available options while choosing a VPN and use it effectively.<\/jats:p>","DOI":"10.1145\/3579162","type":"journal-article","created":{"date-parts":[[2023,1,9]],"date-time":"2023-01-09T13:10:29Z","timestamp":1673269829000},"page":"1-47","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":40,"title":["Security Assessment and Evaluation of VPNs: A Comprehensive Survey"],"prefix":"10.1145","volume":"55","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2437-4870","authenticated-orcid":false,"given":"Haider","family":"Abbas","sequence":"first","affiliation":[{"name":"National University of Sciences and Technology (NUST)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3235-890X","authenticated-orcid":false,"given":"Naina","family":"Emmanuel","sequence":"additional","affiliation":[{"name":"National University of Sciences and Technology (NUST)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4912-6168","authenticated-orcid":false,"given":"Muhammad Faisal","family":"Amjad","sequence":"additional","affiliation":[{"name":"National University of Sciences and Technology (NUST)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0613-0653","authenticated-orcid":false,"given":"Tahreem","family":"Yaqoob","sequence":"additional","affiliation":[{"name":"National University of Sciences and Technology (NUST)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9440-7669","authenticated-orcid":false,"given":"Mohammed","family":"Atiquzzaman","sequence":"additional","affiliation":[{"name":"University of Oklahoma"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6937-4161","authenticated-orcid":false,"given":"Zafar","family":"Iqbal","sequence":"additional","affiliation":[{"name":"National University of Sciences and Technology (NUST)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7562-1093","authenticated-orcid":false,"given":"Narmeen","family":"Shafqat","sequence":"additional","affiliation":[{"name":"National University of Sciences and Technology (NUST)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9113-4490","authenticated-orcid":false,"given":"Waleed Bin","family":"Shahid","sequence":"additional","affiliation":[{"name":"National University of Sciences and Technology (NUST)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4211-4079","authenticated-orcid":false,"given":"Ali","family":"Tanveer","sequence":"additional","affiliation":[{"name":"National University of Sciences and Technology (NUST)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9011-2521","authenticated-orcid":false,"given":"Umer","family":"Ashfaq","sequence":"additional","affiliation":[{"name":"National University of Sciences and Technology (NUST)"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,7,13]]},"reference":[{"key":"e_1_3_2_2_2","unstructured":"Lars Westberg Laszlo Hevizi and Vicknesan Ayadurai. 2015. Using tunneling to enhance remote LAN connectivity. (Oct. 132015). US Patent 9 160 714."},{"key":"e_1_3_2_3_2","article-title":"Understanding VPNs and PPTP","author":"Townsend Kevin","year":"1998","unstructured":"Kevin Townsend. 1998. Understanding VPNs and PPTP. PC Network Advisor, \u010dlanak, srpanj (1998).","journal-title":"PC Network Advisor, \u010dlanak, srpanj"},{"key":"e_1_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.1109\/NGNS.2012.6656108"},{"key":"e_1_3_2_5_2","article-title":"Virtual private network (VPN) management and IPSec tunneling technology","volume":"1","author":"Ibrahim Lana","year":"2017","unstructured":"Lana Ibrahim. 2017. Virtual private network (VPN) management and IPSec tunneling technology. Middle East 1 (2017), 76\u201386.","journal-title":"Middle East"},{"key":"e_1_3_2_6_2","unstructured":"Kwok Ho Cheung. 1999. Design and security issues on virtual private networks with resource reservation in advance. PhD thesis."},{"key":"e_1_3_2_7_2","unstructured":"Ayhan ERDO\u011eAN and Dz Yzb. 2001. Virtual private networks (VPNs): A survey. 39 5 (2001)."},{"key":"e_1_3_2_8_2","doi-asserted-by":"publisher","DOI":"10.21608\/iceeng.2018.30169"},{"issue":"4","key":"e_1_3_2_9_2","first-page":"3","article-title":"A survey report on VPN security & its technologies","volume":"5","author":"Gokulakrishnan Jayanthi","year":"2014","unstructured":"Jayanthi Gokulakrishnan and V. Thulasi Bai. 2014. A survey report on VPN security & its technologies. Indian Journal of Computer Science and Engineering 5, 4 (2014), 3\u20135.","journal-title":"Indian Journal of Computer Science and Engineering"},{"key":"e_1_3_2_10_2","first-page":"88","volume-title":"Proceedings of the International Conference on e-Infrastructure and e-Services for Developing Countries","author":"Ahmat Daouda","year":"2016","unstructured":"Daouda Ahmat, Mahamat Barka, and Damien Magoni. 2016. Mobile VPN schemes: Technical analysis and experiments. In Proceedings of the International Conference on e-Infrastructure and e-Services for Developing Countries. Springer, 88\u201397."},{"key":"e_1_3_2_11_2","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1411"},{"key":"e_1_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.1145\/3371676.3371681"},{"key":"e_1_3_2_13_2","unstructured":"B. H. Priyanka and Ravi Prakash. 2015. A critical survey of privacy infrastructures.  arXiv:1512.07207. Retrieved from https:\/\/arxiv.org\/abs\/1512.07207."},{"key":"e_1_3_2_14_2","doi-asserted-by":"publisher","DOI":"10.1109\/SDNE.1996.502456"},{"key":"e_1_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1109\/comst.2015.2496624"},{"key":"e_1_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2009.10.017"},{"key":"e_1_3_2_17_2","volume-title":"International Journal of Engineering Development and Research","author":"Padhiar Sneha","year":"2015","unstructured":"Sneha Padhiar and Pranav Verma. 2015. A survey on performance evaluation of VPN on various operating system. International Journal of Engineering Development and Research 3, 4 (2015), 516\u2013519."},{"key":"e_1_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278570"},{"key":"e_1_3_2_19_2","doi-asserted-by":"publisher","DOI":"10.5555\/1143155.1648631"},{"key":"e_1_3_2_20_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCMC.2018.8487653"},{"key":"e_1_3_2_21_2","doi-asserted-by":"publisher","DOI":"10.1109\/comst.2014.2352118"},{"key":"e_1_3_2_22_2","unstructured":"Roy Hills. 2005. Common VPN Security Flaws .  NTA Monitor Ltd. white paper."},{"issue":"7","key":"e_1_3_2_23_2","first-page":"9","article-title":"Vulnerabilities of VPN using IPSec and defensive measures","volume":"8","author":"Kang Byeong-Ho","year":"2009","unstructured":"Byeong-Ho Kang and Maricel O. Balitanas. 2009. Vulnerabilities of VPN using IPSec and defensive measures. International Journal of Advanced Science and Technology 8, 7 (2009), 9\u201318.","journal-title":"International Journal of Advanced Science and Technology"},{"key":"e_1_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.4108\/eai.12-1-2018.153558"},{"key":"e_1_3_2_25_2","doi-asserted-by":"crossref","unstructured":"Sheila Frankel Karen Kent Ryan Lewkowski Angela D. Orebaugh Ronald W. Ritchey and Steven R. Sharma. 2005. Guide to IPsec VPNs . NIST Special Publication 800\u201377. National Institute of Standards and Technology.","DOI":"10.6028\/NIST.SP.800-77"},{"key":"e_1_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.1109\/nsyss.2017.7885799"},{"key":"e_1_3_2_27_2","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2006.30"},{"key":"e_1_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44569-2_3"},{"key":"e_1_3_2_29_2","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/1176\/4\/042007"},{"key":"e_1_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.1145\/2812428.2812434"},{"key":"e_1_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.17487\/RFC2661"},{"key":"e_1_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1145\/2905055.2905219"},{"key":"e_1_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.autcon.2017.10.030"},{"key":"e_1_3_2_34_2","doi-asserted-by":"crossref","unstructured":"Sheila Frankel Paul Hoffman Angela Orebaugh and Richard Park. 2008. Guide to SSL VPNs . NIST Special Publication 800-113. National Institute of Standards and Technology.","DOI":"10.6028\/NIST.SP.800-113"},{"key":"e_1_3_2_35_2","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2015-0006"},{"key":"e_1_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1109\/RAIT.2012.6194494"},{"key":"e_1_3_2_37_2","unstructured":"David E. Mcdysan. 2004. Virtual private network (VPN)-aware customer premises equipment (CPE) edge router. (Aug. 172004). US Patent 6 778 498."},{"key":"e_1_3_2_38_2","article-title":"OpenVPN","author":"Feilner Markus","year":"2006","unstructured":"Markus Feilner and VPN Open. 2006. OpenVPN: Building and Integrating Virtual Private Networks: Learn How to Build Secure VPNs Using this Powerful Open Source Application. Packt Publishing.","journal-title":"Building and Integrating Virtual Private Networks: Learn How to Build Secure VPNs Using this Powerful Open Source Application."},{"key":"e_1_3_2_39_2","unstructured":"Dezhong Cai Ali Sajassi and Roberto Kobo. 2011. Redundancy at a virtual provider edge node that faces a tunneling protocol core network for virtual private local area network (LAN) service (VPLS). (Dec. 132011). US Patent 8 077 709."},{"key":"e_1_3_2_40_2","doi-asserted-by":"publisher","DOI":"10.1007\/s11036-018-01208-0"},{"key":"e_1_3_2_41_2","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/1168\/6\/062015"},{"key":"e_1_3_2_42_2","doi-asserted-by":"publisher","DOI":"10.1109\/iccnc.2019.8685553"},{"key":"e_1_3_2_43_2","doi-asserted-by":"publisher","DOI":"10.1109\/eltech.2019.8839611"},{"key":"e_1_3_2_44_2","doi-asserted-by":"publisher","DOI":"10.1145\/3434571.3439745"},{"key":"e_1_3_2_45_2","first-page":"1050","volume-title":"Future of Information and Communication Conference","author":"Jingyao Sun","year":"2019","unstructured":"Sun Jingyao, Sonali Chandel, Yu Yunnan, Zang Jingji, and Zhang Zhipeng. 2019. Securing a network: How effective using firewalls and VPNs are?. In Future of Information and Communication Conference. K. Arai and R. Bhatia (Eds.), Springer, 1050\u20131068."},{"key":"e_1_3_2_46_2","unstructured":"TunnelBear. How much data do free users get? https:\/\/help.tunnelbear.com\/hc\/en-us\/articles\/360007004411-How-much-data-do-free-users-get-. accessed: 2021-03-23."},{"key":"e_1_3_2_47_2","doi-asserted-by":"publisher","DOI":"10.30534\/ijeter\/2020\/41842020"},{"key":"e_1_3_2_48_2","doi-asserted-by":"publisher","DOI":"10.1109\/CSE.2015.23"},{"key":"e_1_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.35940\/ijitee.K2087.1081219"},{"key":"e_1_3_2_50_2","unstructured":"Ahmed Nafeez. 2018. Compression Oracle Attacks on VPN Networks. Blackhat (2018)."},{"key":"e_1_3_2_51_2","first-page":"691","volume-title":"Proceedings of the WCC 2000-ICCT 2000. 2000 International Conference on Communication Technology Proceedings","volume":"1","author":"Aqun Zhao","year":"2000","unstructured":"Zhao Aqun, Yuan Yuan, Ji Yi, and Gu Guanqun. 2000. Research on tunneling techniques in virtual private networks. In Proceedings of the WCC 2000-ICCT 2000. 2000 International Conference on Communication Technology Proceedings. Vol. 1. IEEE, 691\u2013697."},{"key":"e_1_3_2_52_2","doi-asserted-by":"publisher","DOI":"10.1002\/bltj.10083"},{"key":"e_1_3_2_53_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCIS.2010.67"},{"key":"e_1_3_2_54_2","article-title":"Security network with virtual private network and (IPSec) applications","author":"Abedula Dhari Kh","year":"2014","unstructured":"Dhari Kh Abedula and Ahmed A. Sabeeh. 2014. Security network with virtual private network and (IPSec) applications. Intl. Conf. on Advances in Computer Science and Electronics Engineering (CSEE\u20192014).","journal-title":"Intl. Conf. on Advances in Computer Science and Electronics Engineering (CSEE\u20192014)."},{"key":"e_1_3_2_55_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-02641-7_17"},{"key":"e_1_3_2_56_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-35055-0_7"},{"key":"e_1_3_2_57_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-48965-0_10"},{"key":"e_1_3_2_58_2","doi-asserted-by":"crossref","first-page":"256","DOI":"10.1007\/978-3-662-49301-4_17","volume-title":"The New Codebreakers","author":"Bernstein Daniel J.","year":"2016","unstructured":"Daniel J. Bernstein, Tanja Lange, and Ruben Niederhagen. 2016. Dual EC: A standardized back door. In The New Codebreakers. P. Ryan, D. Naccache, and J. J. Quisquater (Eds.), Springer, 256\u2013281."},{"key":"e_1_3_2_59_2","first-page":"319","volume-title":"Proceedings of the 23rd USENIXSecurity Symposium","author":"Checkoway Stephen","year":"2014","unstructured":"Stephen Checkoway, Ruben Niederhagen, Adam Everspaugh, Matthew Green, Tanja Lange, Thomas Ristenpart, Daniel J. Bernstein, Jake Maskiewicz, Hovav Shacham, and Matthew Fredrikson. 2014. On the practical exploitability of dual EC in TLS implementations. In Proceedings of the 23rd USENIXSecurity Symposium. 319\u2013335."},{"key":"e_1_3_2_60_2","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243756"},{"key":"e_1_3_2_61_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2012.01.001"},{"key":"e_1_3_2_62_2","unstructured":"Education Bureau. 2010. The government of hong kong special administrative region. Education Support for Non-Chinese Speaking Students: Reduction of Examination Fee Level of the General Certificate of Secondary Education (Chinese) Examination ."},{"key":"e_1_3_2_63_2","first-page":"567","volume-title":"Proceedings of the 27th USENIX Security Symposium","author":"Felsch Dennis","year":"2018","unstructured":"Dennis Felsch, Martin Grothe, J\u00f6rg Schwenk, Adam Czubak, and Marcin Szymanek. 2018. The dangers of key reuse: Practical attacks on IPsec IKE. In Proceedings of the 27th USENIX Security Symposium. 567\u2013583."},{"key":"e_1_3_2_64_2","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987471"},{"key":"e_1_3_2_65_2","doi-asserted-by":"publisher","DOI":"10.1109\/WOCN.2016.7759880"},{"key":"e_1_3_2_66_2","doi-asserted-by":"publisher","DOI":"10.1109\/ibcast.2015.7058524"},{"key":"e_1_3_2_67_2","doi-asserted-by":"publisher","DOI":"10.5120\/ijca2019918592"},{"key":"e_1_3_2_68_2","volume-title":"Proceedings of the 2020 IFIP Networking Conference","author":"Pudelko Maximilian","year":"2020","unstructured":"Maximilian Pudelko, Paul Emmerich, Sebastian Gallenm\u00fcller, and Georg Carle. 2020. Performance analysis of VPN gateways. In Proceedings of the 2020 IFIP Networking Conference."},{"key":"e_1_3_2_69_2","doi-asserted-by":"publisher","DOI":"10.1109\/iceceng.2011.6057458"},{"key":"e_1_3_2_70_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.01.049"},{"key":"e_1_3_2_71_2","doi-asserted-by":"publisher","DOI":"10.1109\/NSWCTC.2009.367"},{"key":"e_1_3_2_72_2","doi-asserted-by":"publisher","DOI":"10.1109\/iccdcs.2017.7959718"},{"key":"e_1_3_2_73_2","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2004.1341273"},{"key":"e_1_3_2_74_2","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2012.187"},{"key":"e_1_3_2_75_2","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2006.30"},{"key":"e_1_3_2_76_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSESS.2011.5982375"},{"key":"e_1_3_2_77_2","doi-asserted-by":"publisher","DOI":"10.1109\/wfcs.2019.8758010"},{"key":"e_1_3_2_78_2","doi-asserted-by":"publisher","DOI":"10.1109\/NSysS.2017.7885799"},{"key":"e_1_3_2_79_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICNS.2008.8"},{"key":"e_1_3_2_80_2","doi-asserted-by":"publisher","DOI":"10.1109\/icsengt.2018.8606381"},{"key":"e_1_3_2_81_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-92459-5_6"},{"key":"e_1_3_2_82_2","article-title":"Performance analysis and special issues of VPN technologies in communication: Trusted VPNs, secure VPNs and hybrid VPNs","volume":"2","author":"Rajamohan DR. P.","year":"2014","unstructured":"DR. P. Rajamohan. 2014. Performance analysis and special issues of VPN technologies in communication: Trusted VPNs, secure VPNs and hybrid VPNs. IPASJ International Journal of Computer Science 2, 7 (2014), 239\u2013242.","journal-title":"IPASJ International Journal of Computer Science"},{"key":"e_1_3_2_83_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICEI.2018.00041"},{"issue":"1","key":"e_1_3_2_84_2","first-page":"51","article-title":"Quantitative evaluation of virtual private networks and its implications for communication security in industrial protocols","volume":"3","author":"Rahimi Sanaz","year":"2017","unstructured":"Sanaz Rahimi and Mehdi Zargham. 2017. Quantitative evaluation of virtual private networks and its implications for communication security in industrial protocols. International Journal of Computational Intelligence Theory and Practice 3, 1 (2017), 51\u201361.","journal-title":"International Journal of Computational Intelligence Theory and Practice"},{"key":"e_1_3_2_85_2","unstructured":"Geoffrey G. Thomas and John Whaley. 2018. Optimizing connections over virtual private networks. (April 102018). US Patent 9 942 199."},{"key":"e_1_3_2_86_2","doi-asserted-by":"publisher","DOI":"10.1364\/OFC.2018.Th2A.32"},{"key":"e_1_3_2_87_2","unstructured":"Jeffrey R. Hoy Sreekanth R. Iyer Kaushal K. Kapadia Ravi K. Muthukrishnan and Nataraj Nagaratnam. 2019. Dynamically defined virtual private network tunnels in hybrid cloud environments. (Feb. 142019). US Patent App. 16\/159 678."},{"key":"e_1_3_2_88_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICITST.2015.7412120"},{"key":"e_1_3_2_89_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2005.25"},{"key":"e_1_3_2_90_2","doi-asserted-by":"publisher","DOI":"10.1109\/DSC.2018.00101"},{"key":"e_1_3_2_91_2","doi-asserted-by":"publisher","DOI":"10.1109\/RAIT.2012.6194494"},{"key":"e_1_3_2_92_2","article-title":"IPSec and SSL as solutions for the enterprise network security","author":"Sichkar V. N.","year":"2018","unstructured":"V. N. Sichkar. 2018. IPSec and SSL as solutions for the enterprise network security. Juvenis scientia 1, 1(2018), 13\u201315.","journal-title":"Juvenis scientia"},{"key":"e_1_3_2_93_2","doi-asserted-by":"publisher","DOI":"10.1109\/NGMAST.2008.18"},{"key":"e_1_3_2_94_2","doi-asserted-by":"publisher","DOI":"10.1109\/WiCOM.2012.6478270"},{"key":"e_1_3_2_95_2","doi-asserted-by":"publisher","DOI":"10.1109\/SSME.2009.30"},{"key":"e_1_3_2_96_2","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2015-0006"},{"key":"e_1_3_2_97_2","unstructured":"Scott Behrens. 2020. Neohapsis\/Suddensix . Retrieved May 19 2020 from https:\/\/github.com\/Neohapsis\/suddensix."},{"key":"e_1_3_2_98_2","volume-title":"Decrypting SSL\/TLS Traffic with Wireshark","author":"Resources Infosec","year":"2019","unstructured":"Infosec Resources. 2019. Decrypting SSL\/TLS Traffic with Wireshark. Retrieved May 19, 2020 from https:\/\/resources.infosecinstitute.com\/decrypting-ssl-tls-traffic-with-wireshark\/."},{"key":"e_1_3_2_99_2","doi-asserted-by":"publisher","DOI":"10.5220\/0005740704070414"},{"key":"e_1_3_2_100_2","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2015-0006"},{"key":"e_1_3_2_101_2","doi-asserted-by":"publisher","DOI":"10.1109\/CCST.2017.8167801"},{"key":"e_1_3_2_102_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33167-1_42"},{"key":"e_1_3_2_103_2","doi-asserted-by":"crossref","unstructured":"A. Durand J. Ihren and P. Savola. 2006. Operational considerations and issues with IPv6 DNS. Technical report 2006.","DOI":"10.17487\/rfc4472"},{"key":"e_1_3_2_104_2","volume-title":"The VORACLE Attack Vulnerability","year":"2019","unstructured":"OpenVPN. 2019. The VORACLE Attack Vulnerability. Retrieved May 19, 2020 from https:\/\/openvpn.net\/security-advisory\/the-voracle-attack-vulnerability\/."},{"key":"e_1_3_2_105_2","first-page":"187","volume-title":"Proceedings of the USENIX Security Symposium","author":"Barth Adam","year":"2009","unstructured":"Adam Barth, Joel Weinberger, and Dawn Song. 2009. Cross-origin javascript capability leaks: Detection, exploitation, and defense. In Proceedings of the USENIX Security Symposium. 187\u2013198."},{"key":"e_1_3_2_106_2","volume-title":"Google Chrome and Other Browsers Let Any Website Track You - Here\u2019s How to Stop it","author":"Wagenseil P.","year":"2019","unstructured":"P. Wagenseil. 2019. Google Chrome and Other Browsers Let Any Website Track You - Here\u2019s How to Stop it. Retrieved May 19, 2020 from https:\/\/www.tomsguide.com\/news\/browser-leaks-rsa20."},{"key":"e_1_3_2_107_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICACTE.2008.187"},{"key":"e_1_3_2_108_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2004.01.012"},{"key":"e_1_3_2_109_2","first-page":"161","volume-title":"Proceedings of the 2018 IEEE International Conference of Safety Produce Informatization","author":"Zhang Jinhai","year":"2019","unstructured":"Jinhai Zhang. 2019. Research on key technology of VPN protocol recognition. In Proceedings of the 2018 IEEE International Conference of Safety Produce Informatization. IEEE, 161\u2013164."},{"key":"e_1_3_2_110_2","doi-asserted-by":"publisher","DOI":"10.1145\/1324302.1324357"},{"key":"e_1_3_2_111_2","unstructured":"Roy Hills. 2005. Common VPN Security Flaws . NTA Monitor Ltd. white paper."},{"key":"e_1_3_2_112_2","unstructured":"Retains Full Rights. 2003. Global information assurance certification paper. GIAC."},{"key":"e_1_3_2_113_2","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098842"},{"key":"e_1_3_2_114_2","unstructured":"Rauchg. Http\/2 and spdy indicator. https:\/\/chrome.google.com\/webstore\/detail\/http2-and-spdy-indicator\/. accessed: 2021-03-23."},{"key":"e_1_3_2_115_2","volume-title":"Risk Analysis: A Quantitative Guide","author":"Vose David","year":"2008","unstructured":"David Vose. 2008. Risk Analysis: A Quantitative Guide. John Wiley & Sons."}],"container-title":["ACM Computing Surveys"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3579162","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3579162","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:49:27Z","timestamp":1750182567000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3579162"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,13]]},"references-count":114,"journal-issue":{"issue":"13s","published-print":{"date-parts":[[2023,12,31]]}},"alternative-id":["10.1145\/3579162"],"URL":"https:\/\/doi.org\/10.1145\/3579162","relation":{},"ISSN":["0360-0300","1557-7341"],"issn-type":[{"value":"0360-0300","type":"print"},{"value":"1557-7341","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,7,13]]},"assertion":[{"value":"2021-04-29","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2022-12-16","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-07-13","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}