cover

OpenVPN is Open to VPN Fingerprinting: Appendix

14 Jan 2025

This research outlines methods to fingerprint OpenVPN traffic, achieving 85% accuracy, raising concerns about VPN blockability and countermeasures.

cover

OpenVPN is Open to VPN Fingerprinting: Acknowledgement and References

14 Jan 2025

This research outlines methods to fingerprint OpenVPN traffic, achieving 85% accuracy, raising concerns about VPN blockability and countermeasures.

cover

OpenVPN Detection Risks: Scaling Attacks and Calls for Stronger Obfuscation

14 Jan 2025

This research shows OpenVPN's vulnerability to detection and blocking at scale, urging VPN providers to adopt stronger, standardized obfuscation methods.

cover

Mitigating OpenVPN Fingerprinting: Risks and Defensive Strategies

14 Jan 2025

This research reveals OpenVPN fingerprinting risks and suggests separating obfuscation, using random padding, and adopting standardized defenses.

cover

Study Flags OpenVPN Flows with High Accuracy and Minimal False Positives

14 Jan 2025

This research flags 3,638 OpenVPN flows from 10M, confirming 89% accuracy, with a 0.0039% false positive rate, uncovering IoT and VPN detection use cases.

cover

OpenVPN Obfuscation Flaws: Study Uncovers Detection Vulnerabilities

14 Jan 2025

This research identifies OpenVPN flows in 39/40 vanilla and 34/41 obfuscated configurations, revealing vulnerabilities in many VPN obfuscation strategies.

cover

OpenVPN is Open to VPN Fingerprinting: Real-world Deployment Setup

14 Jan 2025

This research deploys a scalable OpenVPN detection framework, sampling 12.5% of traffic, processing 15 TB daily, and testing 81 VPN configurations.

cover

Probing UDP and Obfuscated OpenVPN Servers: Leveraging Subnet Proximity

14 Jan 2025

This research extends probing to TCP servers near UDP or obfuscated OpenVPN endpoints, leveraging subnet proximity to enhance detection efficiency.

cover

Server Churn Insights: Balancing Efficiency and Accuracy in OpenVPN Probing

14 Jan 2025

This research finds most OpenVPN servers rarely churn, enabling efficient daily batch probing with minimal risk of IP changes impacting detection.