{"id":"https://openalex.org/W2995998372","doi":"https://doi.org/10.48550/arxiv.1912.04669","title":"Client-side Vulnerabilities in Commercial VPNs","display_name":"Client-side Vulnerabilities in Commercial VPNs","publication_year":2019,"publication_date":"2019-12-10","ids":{"openalex":"https://openalex.org/W2995998372","doi":"https://doi.org/10.48550/arxiv.1912.04669","mag":"2995998372"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:1912.04669","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1912.04669","pdf_url":"https://arxiv.org/pdf/1912.04669","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1912.04669","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018917918","display_name":"Thanh Bui","orcid":"https://orcid.org/0000-0002-5137-8551","observed_orcids":["https://orcid.org/0000-0002-5137-8551"]},"institutions":[{"id":"https://openalex.org/I9927081","display_name":"Aalto University","ror":"https://ror.org/020hwjq30","country_code":"FI","type":"education","lineage":["https://openalex.org/I9927081"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Bui, Thanh","raw_affiliation_strings":["Department of Computer Science Aalto Univeristy , Finland","(Helsinki University of Technology)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science Aalto Univeristy , Finland","institution_ids":["https://openalex.org/I9927081"]},{"raw_affiliation_string":"(Helsinki University of Technology)","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061196553","display_name":"Siddharth Prakash Rao","orcid":"https://orcid.org/0000-0001-8656-1877","observed_orcids":["https://orcid.org/0000-0001-8656-1877"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rao, Siddharth Prakash","raw_affiliation_strings":["(Helsinki University of Technology)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"(Helsinki University of Technology)","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005295563","display_name":"Markku Antikainen","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I9927081","display_name":"Aalto University","ror":"https://ror.org/020hwjq30","country_code":"FI","type":"education","lineage":["https://openalex.org/I9927081"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Antikainen, Markku","raw_affiliation_strings":["Department of Computer Science Aalto Univeristy , Finland","(Helsinki University of Technology)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science Aalto Univeristy , Finland","institution_ids":["https://openalex.org/I9927081"]},{"raw_affiliation_string":"(Helsinki University of Technology)","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030176989","display_name":"Tuomas Aura","orcid":"https://orcid.org/0000-0003-1648-8875","observed_orcids":["https://orcid.org/0000-0003-1648-8875"]},"institutions":[{"id":"https://openalex.org/I9927081","display_name":"Aalto University","ror":"https://ror.org/020hwjq30","country_code":"FI","type":"education","lineage":["https://openalex.org/I9927081"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Aura, Tuomas","raw_affiliation_strings":["Department of Computer Science Aalto Univeristy , Finland","(Helsinki University of Technology)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science Aalto Univeristy , Finland","institution_ids":["https://openalex.org/I9927081"]},{"raw_affiliation_string":"(Helsinki University of Technology)","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13983","display_name":"Cybersecurity and Information Systems","score":0.4603999853134155,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T13983","display_name":"Cybersecurity and Information Systems","score":0.4603999853134155,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.2833999991416931,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.13590000569820404,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/virtual-private-networks","display_name":"virtual private networks","score":0.8410000205039978},{"id":"https://openalex.org/keywords/authentication-bypass","display_name":"authentication bypass","score":0.8009999990463257},{"id":"https://openalex.org/keywords/password-theft","display_name":"password theft","score":0.8040000200271606},{"id":"https://openalex.org/keywords/security-and-privacy","display_name":"privacy and security","score":0.36800000071525574}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7345024347305298},{"id":"https://openalex.org/C117387248","wikidata":"https://www.wikidata.org/wiki/Q11186","display_name":"Private network","level":2,"score":0.6538419127464294},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5571947693824768},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.5262405276298523},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.510627806186676},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.4791414141654968},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4698169529438019},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.46905022859573364},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4586058557033539},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.4565945565700531},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.4542132616043091},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.36042529344558716},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.34239113330841064},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2763499617576599},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17179647088050842},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.1606016755104065},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:arXiv.org:1912.04669","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1912.04669","pdf_url":"https://arxiv.org/pdf/1912.04669","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:2995998372","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/pdf/1912.04669.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.1912.04669","doi":"https://doi.org/10.48550/arxiv.1912.04669","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1912.04669","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1912.04669","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1912.04669","pdf_url":"https://arxiv.org/pdf/1912.04669","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2995998372.pdf","grobid_xml":"https://content.openalex.org/works/W2995998372.grobid-xml"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W1553743290","https://openalex.org/W1565618983","https://openalex.org/W1587731328","https://openalex.org/W1722511567","https://openalex.org/W1865947861","https://openalex.org/W1873601359","https://openalex.org/W1924043382","https://openalex.org/W2006299077","https://openalex.org/W2021314679","https://openalex.org/W2042923641","https://openalex.org/W2082336059","https://openalex.org/W2095287993","https://openalex.org/W2117654928","https://openalex.org/W2132147947","https://openalex.org/W2140471436","https://openalex.org/W2253199766","https://openalex.org/W2290822213","https://openalex.org/W2400877190","https://openalex.org/W2528804063","https://openalex.org/W2536707834","https://openalex.org/W2543576891","https://openalex.org/W2551244268","https://openalex.org/W2751705341","https://openalex.org/W2754553764","https://openalex.org/W2795258995","https://openalex.org/W2888822923","https://openalex.org/W2889321880","https://openalex.org/W2892082588","https://openalex.org/W2899517910","https://openalex.org/W3046030217"],"related_works":["https://openalex.org/W2095287993","https://openalex.org/W7099847212","https://openalex.org/W2896797341","https://openalex.org/W7095567770","https://openalex.org/W4211201399","https://openalex.org/W4322749344","https://openalex.org/W2156361150","https://openalex.org/W7151622641","https://openalex.org/W7214814274","https://openalex.org/W4324009176"],"abstract_inverted_index":{"Internet":[0],"users":[1,90],"increasingly":[2],"rely":[3],"on":[4,75,103],"commercial":[5,69],"virtual":[6],"private":[7],"network":[8],"(VPN)":[9],"services":[10,19],"to":[11,28,91,123,129,153],"protect":[12],"their":[13],"security":[14,66],"and":[15,46,84,101,106,148],"privacy.":[16],"The":[17,72],"VPN":[18,30,70,82,99,112,134,145],"route":[20],"the":[21,33,38,50,57,65,77,86,111,133,139,144,157],"client's":[22,39],"traffic":[23,126],"over":[24],"an":[25,119],"encrypted":[26],"tunnel":[27],"a":[29],"gateway":[31],"in":[32,56],"cloud.":[34],"Thus,":[35],"they":[36,47],"hide":[37],"real":[40],"IP":[41],"address":[42],"from":[43,53],"online":[44],"services,":[45],"also":[48,142],"shield":[49],"user's":[51,146],"connections":[52],"perceived":[54],"threats":[55],"access":[58],"networks.":[59],"In":[60,136],"this":[61],"paper,":[62],"we":[63],"study":[64],"of":[67,132,156],"such":[68],"services.":[71],"focus":[73],"is":[74],"how":[76,85],"client":[78,94],"applications":[79],"set":[80],"up":[81],"tunnels,":[83],"service":[87],"providers":[88],"instruct":[89],"configure":[92],"generic":[93],"software.":[95],"We":[96,108,150],"analyze":[97],"common":[98],"protocols":[100],"implementations":[102],"Windows,":[104],"macOS":[105],"Ubuntu.":[107],"find":[109],"that":[110],"clients":[113],"have":[114],"various":[115],"configuration":[116],"flaws,":[117],"which":[118],"attacker":[120,140],"can":[121,141],"exploit":[122],"strip":[124],"off":[125],"encryption":[127],"or":[128],"bypass":[130],"authentication":[131],"gateway.":[135],"some":[137],"cases,":[138],"steal":[143],"username":[147],"password.":[149],"suggest":[151],"ways":[152],"mitigate":[154],"each":[155],"discovered":[158],"vulnerabilities.":[159]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2019-12-26T00:00:00"}