ESORICS 2020: Best Paper Award
Pine: Enabling Privacy-Preserving Deep Packet Inspection on TLS with Rule-Hiding and Fast Connection Establishment
Best Paper Award — European Symposium on Research in Computer Security (ESORICS 2020)
Enterprise network security relies on middleboxes to inspect traffic for threats — but increasingly, that traffic is encrypted via TLS, making conventional inspection impossible without breaking end-to-end security guarantees. Pine enables privacy-preserving deep packet inspection (DPI) directly over TLS-encrypted traffic, ensuring that neither the user's plaintext data nor the enterprise's inspection rule set is exposed to the middlebox provider.
Compared to prior works such as BlindBox and PrivDPI, Pine introduces rule-hiding — protecting the confidentiality of enterprise inspection policies — while simultaneously reducing TLS connection establishment overhead, making it practical for real-world deployment at scale.
