Hiding Amongst the Clouds

Size: px
Start display at page:

Download "Hiding Amongst the Clouds"

Transcription

1 Hiding Amongst the Clouds A Proposal for Cloud-based Onion Routing Nicholas Jones Matvey Arye Jacopo Cesareo Michael J. Freedman Princeton University

2

3 We

4 and

5

6 but...

7

8

9 and

10

11 C O loud-based nion R outing

12 Benefits, Risks, and Challenges - Potential benefits of cloud infrastructure - High performance - Adaptability to censorship - Economic challenges - New security problems

13 Benefits of Cloud Infrastructure Performance (latency, throughput) Censorship Resistance

14 Performance - Individual nodes are higher bandwidth - Ability to add and remove nodes to meet demand 5:00 P.M.

15 Performance - Individual nodes are higher bandwidth - Ability to add and remove nodes to meet demand 7:00 P.M.

16 Performance - Individual nodes are higher bandwidth - Ability to add and remove nodes to meet demand 8:00 P.M.

17 Performance - Individual nodes are higher bandwidth - Ability to add and remove nodes to meet demand 11:00 P.M.

18 Performance - Individual nodes are higher bandwidth - Ability to add and remove nodes to meet demand 12:00 A.M.

19 Performance - Individual nodes are higher bandwidth - Ability to add and remove nodes to meet demand 2:00 A.M.

20 COR has higher throughput than Tor

21 COR has higher throughput than Tor

22 COR has higher throughput than Tor US & International

23 COR has higher throughput than Tor US & International US Only

24 COR has higher throughput than Tor US & International US Only 7.6x speedup

25 Multi-homed Datacenters are Harder to Monitor

26 Multi-homed Datacenters are Harder to Monitor 1-10 Mbps Home

27 Multi-homed Datacenters are Harder to Monitor 1-10 Mbps Home

28 Multi-homed Datacenters are Harder to Monitor 1-10 Mbps Home Datacenter

29 Multi-homed Datacenters are Harder to Monitor 1-10 Mbps Home Gbps Sprint Datacenter

30 Multi-homed Datacenters are Harder to Monitor 1-10 Mbps Home Gbps Sprint Level 3 Datacenter

31 Multi-homed Datacenters are Harder to Monitor 1-10 Mbps Home Gbps Sprint Level 3 Datacenter AT&T

32 Multi-homed Datacenters are Harder to Monitor 1-10 Mbps Home Gbps Sprint Level 3 Datacenter AT&T

33 Multi-homed Datacenters are Harder to Monitor 1-10 Mbps Home Gbps Sprint Level 3 Datacenter AT&T

34 Multi-homed Datacenters are Harder to Monitor 1-10 Mbps Home Gbps Sprint Level 3 Datacenter AT&T

35 Multi-homed Datacenters are Harder to Monitor 1-10 Mbps Home Gbps Sprint Level 3 Datacenter AT&T

36 Multi-homed Datacenters are Harder to Monitor 1-10 Mbps Home Gbps Sprint Level 3 Datacenter AT&T

37 Blocking Clouds Causes Collateral Damage

38 Blocking Clouds Causes Collateral Damage X

39 Blocking Clouds Causes Collateral Damage X X

40 Blocking Clouds Causes Collateral Damage X X X

41 Blocking Clouds Causes Collateral Damage X X X X

42 Blocking Clouds Causes Collateral Damage

43 Blocking Clouds Causes Collateral Damage

44 Blocking Clouds Causes Collateral Damage

45 Blocking Clouds Causes Collateral Damage

46 Blocking Clouds Causes Collateral Damage

47 Benefits of Clouds - Higher performance - Elasticity to scale to demand - Multi-homing and scale makes eavesdropping difficult - Elasticity forces censors to make hard choices: collateral damage or unblocked access

48 Economics Cloud pricing is affordable for end users

49 Cost of running COR in the cloud - Cloud providers charge for CPU and bandwidth

50 Cost of running COR in the cloud - Cloud providers charge for CPU and bandwidth - CPU is cheap

51 Cost of running COR in the cloud - Cloud providers charge for CPU and bandwidth - CPU is cheap users on a 34 /hr node

52 Cost of running COR in the cloud - Cloud providers charge for CPU and bandwidth - CPU is cheap users on a 34 /hr node

53 Cost of running COR in the cloud - Cloud providers charge for CPU and bandwidth - CPU is cheap users on a 34 /hr node - Bandwidth is dominant cost

54 Cost of running COR in the cloud - Cloud providers charge for CPU and bandwidth - CPU is cheap users on a 34 /hr node - Bandwidth is dominant cost - 100MB as low as 1 Amazon EC2 Pricing

55 Tor s Total Bandwidth Cost in the Cloud Approximately 900 MB/s 376 TB/month COR Cost: $61,200/month

56 Security Challenges and Solutions Involved Parties and Trust Model Building Tunnels Paying for Tunnels Learning About Relays

57 Distributing Trust - Tor - Tunnels between volunteer relays - COR - Tunnels between clouds from different providers

58 Is that sufficient? - Should users pay cloud providers directly? - Not anonymous: Credit cards and Paypal leak info

59 Is that sufficient? - Should users pay cloud providers directly? - Not anonymous: Credit cards and Paypal leak info - Another layer of indirection: Anonymity Service Providers - Operate relays and pay cloud providers - Mask users identities - Accept anonymous payment for access

60 System Roles - Cloud Hosting Providers (CHPs) - Provide infrastructure for COR relays - Anonymity Service Providers (ASPs) - Run relays and directory servers - Sell tokens - Redeemable for XX MB of connectivity or XX amount of time

61 System Architecture Example CHP A ASP 1 ASP 2 REQUEST TRAFFIC ENCRYPTED DESTINATION SERVER IP IP USER CHP B Organizations used above are examples only

62 System Architecture Example CHP A ASP 1 ASP 2 REQUEST TRAFFIC ENCRYPTED DESTINATION SERVER IP IP USER CHP B Cloud Hosting Providers Organizations used above are examples only

63 System Architecture Example CHP A ASP 1 ASP 2 REQUEST TRAFFIC ENCRYPTED DESTINATION SERVER IP IP USER CHP B Organizations used above are examples only

64 System Architecture Example CHP A ASP 1 ASP 2 REQUEST TRAFFIC ENCRYPTED DESTINATION SERVER IP IP USER CHP B Anonymity Service Providers Organizations used above are examples only

65 System Architecture Example CHP A ASP 1 ASP 2 REQUEST TRAFFIC ENCRYPTED DESTINATION SERVER IP IP USER CHP B Organizations used above are examples only

66 Circuit Construction Must be Policy Aware

67 Circuit Construction Must be Policy Aware - Two relays within each datacenter

68 Circuit Construction Must be Policy Aware - Two relays within each datacenter - Different entry and exit ASPs

69 Circuit Construction Must be Policy Aware - Two relays within each datacenter - Different entry and exit ASPs - Different entry and exit CHPs

70 Circuit Construction Must be Policy Aware - Two relays within each datacenter - Different entry and exit ASPs - Different entry and exit CHPs - ASP and CHP relays are contiguous within a circuit

71 Paying for Access - Users purchase tokens - Redeem tokens for access (bandwidth or time) - Chaum s e-cash: - Cryptographically untraceable

72 How do users gain access? - Users need two things: - Tokens - COR Directory

73 How do users gain access? - Users need two things: - Tokens - COR Directory - Solution: Bootstrapping Network - Low speed - High Latency - Free

74 Adversaries enumerate and block ingress - Current technologies - Tor Bridges - Two separate problems: - COR Relays - High speed, low latency, not free - Bootstrapping - Low speed, high latency, free

75 Summary Tor COR

76 Summary Tor COR Secure

77 Summary Tor COR Secure High Speed

78 Summary Tor COR Secure High Speed Dynamic Scaling

79 Summary Tor COR Secure High Speed Dynamic Scaling Adaptive to censorship

80 Summary Tor COR Secure High Speed Dynamic Scaling Adaptive to censorship Free

How Alice and Bob meet if they don t like onions

How Alice and Bob meet if they don t like onions How Alice and Bob meet if they don t like onions Survey of Network Anonymisation Techniques Erik Sy 34th Chaos Communication Congress, Leipzig Agenda 1. Introduction to Anonymity Networks Anonymity Strategies

More information

0x1A Great Papers in Computer Security

0x1A Great Papers in Computer Security CS 380S 0x1A Great Papers in Computer Security Vitaly Shmatikov http://www.cs.utexas.edu/~shmat/courses/cs380s/ Privacy on Public Networks Internet is designed as a public network Wi-Fi access points,

More information

Introduction. Overview of Tor. How Tor works. Drawback of Tor s directory server Potential solution. What is Tor? Why use Tor?

Introduction. Overview of Tor. How Tor works. Drawback of Tor s directory server Potential solution. What is Tor? Why use Tor? Introduction 1 Overview of Tor What is Tor? Why use Tor? How Tor works Encryption, Circuit Building, Directory Server Drawback of Tor s directory server Potential solution Using DNS Security Extension

More information

A SIMPLE INTRODUCTION TO TOR

A SIMPLE INTRODUCTION TO TOR A SIMPLE INTRODUCTION TO TOR The Onion Router Fabrizio d'amore May 2015 Tor 2 Privacy on Public Networks Internet is designed as a public network Wi-Fi access points, network routers see all traffic that

More information

Personalized Pseudonyms for Servers in the Cloud. Qiuyu Xiao (UNC-Chapel Hill) Michael K. Reiter (UNC-Chapel Hill) Yinqian Zhang (Ohio State Univ.

Personalized Pseudonyms for Servers in the Cloud. Qiuyu Xiao (UNC-Chapel Hill) Michael K. Reiter (UNC-Chapel Hill) Yinqian Zhang (Ohio State Univ. Personalized Pseudonyms for Servers in the Cloud Qiuyu Xiao (UNC-Chapel Hill) Michael K. Reiter (UNC-Chapel Hill) Yinqian Zhang (Ohio State Univ.) Background Server s identity is not well protected with

More information

The Tor Network. Cryptography 2, Part 2, Lecture 6. Ruben Niederhagen. June 16th, / department of mathematics and computer science

The Tor Network. Cryptography 2, Part 2, Lecture 6. Ruben Niederhagen. June 16th, / department of mathematics and computer science The Tor Network Cryptography 2, Part 2, Lecture 6 Ruben Niederhagen June 16th, 2014 Tor Network Introduction 2/33 Classic goals of cryptography: confidentiality, data integrity, authentication, and non-repudiation.

More information

Privacy defense on the Internet. Csaba Kiraly

Privacy defense on the Internet. Csaba Kiraly Advanced Networking Privacy defense on the Internet Csaba Kiraly 1 Topics Anonymity on the Internet Chaum Mix Mix network & Onion Routing Low-latency anonymous routing 2 Anonymity: Chaum mix David L. Chaum

More information

Stadium. A Distributed Metadata-private Messaging System. Matei Zaharia Nickolai Zeldovich SOSP 2017

Stadium. A Distributed Metadata-private Messaging System. Matei Zaharia Nickolai Zeldovich SOSP 2017 Stadium A Distributed Metadata-private Messaging System Nirvan Tyagi Yossi Gilad Derek Leung Matei Zaharia Nickolai Zeldovich SOSP 2017 Previous talk: Anonymous broadcast This talk: Private messaging Alice

More information

ENEE 459-C Computer Security. Security protocols (continued)

ENEE 459-C Computer Security. Security protocols (continued) ENEE 459-C Computer Security Security protocols (continued) Key Agreement: Diffie-Hellman Protocol Key agreement protocol, both A and B contribute to the key Setup: p prime and g generator of Z p *, p

More information

GUI Representation of Cisco IOS CLI Commands

GUI Representation of Cisco IOS CLI Commands CHAPTER 2 This chapter shows examples of how some functions common to both the Cisco IOS version of Cisco OER and the Cisco OER Master Controller Engine are represented in CLI commands and the GUI, which

More information

Protocols for Anonymous Communication

Protocols for Anonymous Communication 18734: Foundations of Privacy Protocols for Anonymous Communication Anupam Datta CMU Fall 2016 Privacy on Public Networks } Internet is designed as a public network } Machines on your LAN may see your

More information

What's the buzz about HORNET?

What's the buzz about HORNET? 1 What's the buzz about HORNET? 2 You've probably all seen the news "Internet-scale anonymity" "Without sacrificing security, the network supports data transfer speeds of up to 93GBps" "can be scaled at

More information

Port-Scanning Resistance in Tor Anonymity Network. Presented By: Shane Pope Dec 04, 2009

Port-Scanning Resistance in Tor Anonymity Network. Presented By: Shane Pope Dec 04, 2009 Port-Scanning Resistance in Tor Anonymity Network Presented By: Shane Pope (Shane.M.Pope@gmail.com) Dec 04, 2009 In partial fulfillment of the requirements for graduation with the Dean's Scholars Honors

More information

Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms. EJ Jung

Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms. EJ Jung Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms EJ Jung Goals 1. Hide what you wrote encryption of any kind symmetric/asymmetric/stream 2. Hide to whom you sent and when pseudonym?

More information

ENEE 459-C Computer Security. Security protocols

ENEE 459-C Computer Security. Security protocols ENEE 459-C Computer Security Security protocols Key Agreement: Diffie-Hellman Protocol Key agreement protocol, both A and B contribute to the key Setup: p prime and g generator of Z p *, p and g public.

More information

Anonymity C S A D VA N C E D S E C U R I T Y TO P I C S P R E S E N TAT I O N BY: PA N AY I OTO U M A R KO S 4 T H O F A P R I L

Anonymity C S A D VA N C E D S E C U R I T Y TO P I C S P R E S E N TAT I O N BY: PA N AY I OTO U M A R KO S 4 T H O F A P R I L Anonymity C S 6 8 2 A D VA N C E D S E C U R I T Y TO P I C S P R E S E N TAT I O N BY: PA N AY I OTO U M A R KO S 4 T H O F A P R I L 2 0 1 9 Tor: The Second- Generation Onion Router R. DINGLEDINE N.

More information

CE Advanced Network Security Anonymity II

CE Advanced Network Security Anonymity II CE 817 - Advanced Network Security Anonymity II Lecture 19 Mehdi Kharrazi Department of Computer Engineering Sharif University of Technology Acknowledgments: Some of the slides are fully or partially obtained

More information

Peeling Onions Understanding and using

Peeling Onions Understanding and using hiro@torproject.org Peeling Onions Understanding and using the network Know your onions What is Tor and what it can do for you. How Tor provides privacy and anonymity Using Tor at the application layer:

More information

Tor. Tor Anonymity Network. Tor Basics. Tor Basics. Free software that helps people surf on the Web anonymously and dodge censorship.

Tor. Tor Anonymity Network. Tor Basics. Tor Basics. Free software that helps people surf on the Web anonymously and dodge censorship. Tor Tor Anonymity Network Free software that helps people surf on the Web anonymously and dodge censorship. CS 470 Introduction to Applied Cryptography Ali Aydın Selçuk Initially developed at the U.S.

More information

THE SECOND GENERATION ONION ROUTER. Roger Dingledine Nick Mathewson Paul Syverson. -Presented by Arindam Paul

THE SECOND GENERATION ONION ROUTER. Roger Dingledine Nick Mathewson Paul Syverson. -Presented by Arindam Paul THE SECOND GENERATION ONION ROUTER Roger Dingledine Nick Mathewson Paul Syverson 1 -Presented by Arindam Paul Menu Motivation: Why do we need Onion Routing? Introduction : What is TOR? Basic TOR Design

More information

CS526: Information security

CS526: Information security Cristina Nita-Rotaru CS526: Information security Anonymity systems. Based on slides by Chi Bun Chan 1: Terminology. Anonymity Anonymity (``without name ) means that a person is not identifiable within

More information

Anonymity and Privacy

Anonymity and Privacy Computer Security Spring 2008 Anonymity and Privacy Aggelos Kiayias University of Connecticut Anonymity in networks Anonymous Credentials Anonymous Payments Anonymous E-mail and Routing E-voting Group,

More information

Definition. Quantifying Anonymity. Anonymous Communication. How can we calculate how anonymous we are? Who you are from the communicating party

Definition. Quantifying Anonymity. Anonymous Communication. How can we calculate how anonymous we are? Who you are from the communicating party Definition Anonymous Communication Hiding identities of parties involved in communications from each other, or from third-parties Who you are from the communicating party Who you are talking to from everyone

More information

Onion services. Philipp Winter Nov 30, 2015

Onion services. Philipp Winter Nov 30, 2015 Onion services Philipp Winter pwinter@cs.princeton.edu Nov 30, 2015 Quick introduction to Tor An overview of Tor Tor is a low-latency anonymity network Based on Syverson's onion routing......which is based

More information

CS 134 Winter Privacy and Anonymity

CS 134 Winter Privacy and Anonymity CS 134 Winter 2016 Privacy and Anonymity 1 Privacy Privacy and Society Basic individual right & desire Relevant to corporations & government agencies Recently increased awareness However, general public

More information

Dissecting Tor Bridges A Security Evaluation of their Private and Public Infrastructures

Dissecting Tor Bridges A Security Evaluation of their Private and Public Infrastructures Dissecting Tor Bridges A Security Evaluation of their Private and Public Infrastructures Srdjan Matic, Carmela Troncoso, Juan Caballero Dublin 31 March 2017 Privacy in electronic communications Alice Bob

More information

Tor: An Anonymizing Overlay Network for TCP

Tor: An Anonymizing Overlay Network for TCP Tor: An Anonymizing Overlay Network for TCP Roger Dingledine The Free Haven Project http://tor.freehaven.net/ http://tor.eff.org/ December 28, 21C3 2004 Talk Outline Motivation: Why anonymous communication?

More information

anonymous routing and mix nets (Tor) Yongdae Kim

anonymous routing and mix nets (Tor) Yongdae Kim anonymous routing and mix nets (Tor) Yongdae Kim Significant fraction of these slides are borrowed from CS155 at Stanford 1 q Why? Anonymous web browsing 1. Discuss health issues or financial matters anonymously

More information

Introduction to Tor. January 20, Secure Web Browsing and Anonymity. Tor Mumbai Meetup, Sukhbir Singh

Introduction to Tor. January 20, Secure Web Browsing and Anonymity. Tor Mumbai Meetup, Sukhbir Singh Introduction to Tor Secure Web Browsing and Anonymity Tor Mumbai Meetup, 2018 Sukhbir Singh sukhbir@torproject.org January 20, 2018 Before We Begin... 2 / 18 Before We Begin... Understand your threat model

More information

Anonymity. Assumption: If we know IP address, we know identity

Anonymity. Assumption: If we know IP address, we know identity 03--4 Anonymity Some degree of anonymity from using pseudonyms However, anonymity is always limited by address TCP will reveal your address address together with ISP cooperation Anonymity is broken We

More information

Onion Routing. Submitted By, Harikrishnan S Ramji Nagariya Sai Sambhu J

Onion Routing. Submitted By, Harikrishnan S Ramji Nagariya Sai Sambhu J Onion Routing Submitted By, Harikrishnan S Ramji Nagariya Sai Sambhu J Motivation Public Network Encryption does not hide Routing Information Traffic Analysis Who is Talking to Whom? by analyzing the traffic

More information

Bandwidth Service Overview

Bandwidth Service Overview Bandwidth Service Overview July 2012 Online Tech 305 E. Eisenhower, Suite 300 Ann Arbor, MI 48108 (734) 213-2020 www.onlinetech.com Copyright 2012, Online Tech Page 1 of 6 1. Audience This paper is intended

More information

Tor Hidden Services. Roger Dingledine Free Haven Project Electronic Frontier Foundation.

Tor Hidden Services. Roger Dingledine Free Haven Project Electronic Frontier Foundation. Tor Hidden Services Roger Dingledine Free Haven Project Electronic Frontier Foundation http://tor.eff.org/ 31 July 2005 Talk Outline Tor overview Circuit-building in Tor Hidden services in Tor Demo Anonymity

More information

Practical Anonymity for the Masses with MorphMix

Practical Anonymity for the Masses with MorphMix Practical Anonymity for the Masses with MorphMix Marc Rennhard, Bernhard Plattner () Financial Cryptography 2004 12 th February 2004 http://www.tik.ee.ethz.ch/~morphmix Overview Circuit-based mix networks

More information

Network Security: Anonymity. Tuomas Aura T Network security Aalto University, Nov-Dec 2010

Network Security: Anonymity. Tuomas Aura T Network security Aalto University, Nov-Dec 2010 Network Security: Anonymity Tuomas Aura T-110.5240 Network security Aalto University, Nov-Dec 2010 Outline 1. Anonymity and privacy 2. High-latency anonymous routing 3. Low-latency anonymous routing Tor

More information

Anonymity and censorship circumvention with Tor

Anonymity and censorship circumvention with Tor Anonymity and censorship circumvention with Tor Lunar July 8th, 2013 LSM2013, Brussels What is this Tor thing? Tor helps people Estimated 500,000 daily Tor users cf. https://metrics.torproject.org/users.html

More information

Challenges in building overlay networks: a case study of Tor. Steven Murdoch Principal Research Fellow University College London

Challenges in building overlay networks: a case study of Tor. Steven Murdoch Principal Research Fellow University College London Challenges in building overlay networks: a case study of Steven Murdoch Principal Research Fellow University College London Who uses? Ordinary people e.g. to avoid unscrupulous marketers, protect children,

More information

CS232. Lecture 21: Anonymous Communications

CS232. Lecture 21: Anonymous Communications CS232 Lecture 21: Anonymous Communications November 21, 2018 2 You Are Not Anonymous 3 Your IP address can be linked directly to you ISPs store communications records Usually for several years (Data Retention

More information

Introducing SOR: SSH-based Onion Routing

Introducing SOR: SSH-based Onion Routing Introducing SOR: SSH-based Onion Routing André Egners Dominik Gatzen Andriy Panchenko Ulrike Meyer 28th of March 2012 On the Internet......nobody knows you re a dog [1993] Introduction Motivation (1) encryption

More information

Computer Security. 15. Tor & Anonymous Connectivity. Paul Krzyzanowski. Rutgers University. Spring 2017

Computer Security. 15. Tor & Anonymous Connectivity. Paul Krzyzanowski. Rutgers University. Spring 2017 Computer Security 15. Tor & Anonymous Connectivity Paul Krzyzanowski Rutgers University Spring 2017 April 24, 2017 CS 419 2017 Paul Krzyzanowski 1 Private Browsing Browsers offer a "private" browsing modes

More information

Anonymous Communication and Internet Freedom

Anonymous Communication and Internet Freedom Anonymous Communication and Internet Freedom CS 161: Computer Security Prof. David Wagner May 2, 2013 Goals For Today State-sponsored adversaries Anonymous communication Internet censorship State-Sponsored

More information

Private Browsing. Computer Security. Is private browsing private? Goal. Tor & The Tor Browser. History. Browsers offer a "private" browsing modes

Private Browsing. Computer Security. Is private browsing private? Goal. Tor & The Tor Browser. History. Browsers offer a private browsing modes Private Browsing Computer Security 16. Tor & Anonymous Connectivity Paul Krzyzanowski Rutgers University Spring 2017 Browsers offer a "private" browsing modes Apple Private Browsing, Mozilla Private Browsing,

More information

Untraceable Nym Creation on the Freedom 2.0 Network

Untraceable Nym Creation on the Freedom 2.0 Network Russell Samuels Ed Hawco November 1, 2000 Untraceable Nym Creation on the Freedom 2.0 Network Version 2.0 This whitepaper, targeted at users with a basic understanding of Freedom, describes the Freedom

More information

Anonymous Communication and Internet Freedom

Anonymous Communication and Internet Freedom Anonymous Communication and Internet Freedom CS 161: Computer Security Prof. David Wagner April 29, 2016 Announcements Final exam in RSF Fieldhouse, 5/10, arrive by 7PM HW4 due Monday, 5/2, 11:59pm Review

More information

Accountability and Resource Management

Accountability and Resource Management A discussion of issues for peer-to-peer systems Roger Dingledine Reputation Technologies arma@reputation.com Michael Freedman MIT mfreed@mit.edu The Free Haven Project freehaven.net Managing scarce resources

More information

this security is provided by the administrative authority (AA) of a network, on behalf of itself, its customers, and its legal authorities

this security is provided by the administrative authority (AA) of a network, on behalf of itself, its customers, and its legal authorities INFRASTRUCTURE SECURITY this security is provided by the administrative authority (AA) of a network, on behalf of itself, its customers, and its legal authorities Goals * prevent or mitigate resource attacks

More information

Tor: The Second-Generation Onion Router. Roger Dingledine, Nick Mathewson, Paul Syverson

Tor: The Second-Generation Onion Router. Roger Dingledine, Nick Mathewson, Paul Syverson Tor: The Second-Generation Onion Router Roger Dingledine, Nick Mathewson, Paul Syverson Introduction Second Generation of Onion Routing Focus on deployability Perfect forward secrecy Separation of protocol

More information

Avoiding The Man on the Wire: Improving Tor s Security with Trust-Aware Path Selection

Avoiding The Man on the Wire: Improving Tor s Security with Trust-Aware Path Selection Avoiding The Man on the Wire: Improving Tor s Security with Trust-Aware Path Selection Aaron Johnson Rob Jansen Aaron D. Jaggard Joan Feigenbaum Paul Syverson (U.S. Naval Research Laboratory) (U.S. Naval

More information

Tor: Online anonymity, privacy, and security.

Tor: Online anonymity, privacy, and security. Tor: Online anonymity, privacy, and security. Runa A. Sandvik runa@torproject.org 12 September 2011 Runa A. Sandvik runa@torproject.org () Tor: Online anonymity, privacy, and security. 12 September 2011

More information

Introduction to Amazon Web Services

Introduction to Amazon Web Services Introduction to Amazon Web Services Introduction Amazon Web Services (AWS) is a collection of remote infrastructure services mainly in the Infrastructure as a Service (IaaS) category, with some services

More information

CISC859: Topics in Advanced Networks & Distributed Computing: Network & Distributed System Security. A Brief Overview of Security & Privacy Issues

CISC859: Topics in Advanced Networks & Distributed Computing: Network & Distributed System Security. A Brief Overview of Security & Privacy Issues CISC859: Topics in Advanced Networks & Distributed Computing: Network & Distributed System Security A Brief Overview of Security & Privacy Issues 1 Topics to Be Covered Cloud computing RFID systems Bitcoin

More information

Metrics for Security and Performance in Low-Latency Anonymity Systems

Metrics for Security and Performance in Low-Latency Anonymity Systems Metrics for Security and Performance in Low-Latency Anonymity Systems Tor user Entry node Tor Network Middle node Exit node Bandwidth per node (kb/s) (log scale) 1e+01 1e+03 1e+05 Encrypted tunnel Web

More information

CS Paul Krzyzanowski

CS Paul Krzyzanowski Computer Security 17. Tor & Anonymous Connectivity Anonymous Connectivity Paul Krzyzanowski Rutgers University Spring 2018 1 2 Anonymity on the Internet Often considered bad Only criminals need to hide

More information

FBI Tor Overview. Andrew Lewman January 17, 2012

FBI Tor Overview. Andrew Lewman January 17, 2012 FBI Tor Overview Andrew Lewman andrew@torproject.org January 17, 2012 Andrew Lewman andrew@torproject.org () FBI Tor Overview January 17, 2012 1 / 28 What are we talking about? Crash course on anonymous

More information

Context. Protocols for anonymity. Routing information can reveal who you are! Routing information can reveal who you are!

Context. Protocols for anonymity. Routing information can reveal who you are! Routing information can reveal who you are! Context Protocols for anonymity The nternet is a public network: Myrto Arapinis School of nformatics University of Edinburgh Routing information is public: P packet headers contain source and destination

More information

Network Security: Anonymity. Tuomas Aura T Network security Aalto University, Nov-Dec 2012

Network Security: Anonymity. Tuomas Aura T Network security Aalto University, Nov-Dec 2012 Network Security: Anonymity Tuomas Aura T-110.5241 Network security Aalto University, Nov-Dec 2012 Outline 1. Anonymity and privacy 2. High-latency anonymous routing 3. Low-latency anonymous routing Tor

More information

Trawling for Tor Hidden Services: Detection, Measurement, Deanonymization

Trawling for Tor Hidden Services: Detection, Measurement, Deanonymization Trawling for Tor Hidden Services: Detection, Measurement, Deanonymization A. Biryukov, I. Pustogarov, R.P. Weinmann University of Luxembourg Ivan.pustogarov@uni.lu May 20, 2013 Overview Background Measuring

More information

Reminder: Datalink Functions Computer Networking. Datalink Architectures

Reminder: Datalink Functions Computer Networking. Datalink Architectures Reminder: Datalink Functions 15-441 15 441 15-641 Computer Networking Lecture 5 Media Access Control Peter Steenkiste Fall 2015 www.cs.cmu.edu/~prs/15-441-f15 Framing: encapsulating a network layer datagram

More information

Weighted Factors for Measuring Anonymity Services: A Case Study on Tor, JonDonym, and I2P

Weighted Factors for Measuring Anonymity Services: A Case Study on Tor, JonDonym, and I2P Weighted Factors for Measuring Anonymity Services: A Case Study on Tor, JonDonym, and I2P Khalid Shahbar A. Nur Zincir-Heywood Faculty of Computer Science Dalhousie University Halifax, Canada {Shahbar,

More information

RAPTOR: Routing Attacks on Privacy in Tor. Yixin Sun. Princeton University. Acknowledgment for Slides. Joint work with

RAPTOR: Routing Attacks on Privacy in Tor. Yixin Sun. Princeton University. Acknowledgment for Slides. Joint work with RAPTOR: Routing Attacks on Privacy in Tor Yixin Sun Princeton University Joint work with Annie Edmundson, Laurent Vanbever, Oscar Li, Jennifer Rexford, Mung Chiang, Prateek Mittal Acknowledgment for Slides

More information

Elastic Compute Service. Quick Start for Windows

Elastic Compute Service. Quick Start for Windows Overview Purpose of this document This document describes how to quickly create an instance running Windows, connect to an instance remotely, and deploy the environment. It is designed to walk you through

More information

AWS Storage Gateway. Amazon S3. Amazon EFS. Amazon Glacier. Amazon EBS. Amazon EC2 Instance. storage. File Block Object. Hybrid integrated.

AWS Storage Gateway. Amazon S3. Amazon EFS. Amazon Glacier. Amazon EBS. Amazon EC2 Instance. storage. File Block Object. Hybrid integrated. AWS Storage Amazon EFS Amazon EBS Amazon EC2 Instance storage Amazon S3 Amazon Glacier AWS Storage Gateway File Block Object Hybrid integrated storage Amazon S3 Amazon Glacier Amazon EBS Amazon EFS Durable

More information

ONIONS ADVENTURES HOW TO USE ONION SERVICES AND THE NETWORK IN YOUR WEB ENDEAVORS hiro@torproject.org https://mastodon.social/@nopressure https://twitter.com/nopressure HI! TOR BOOTH IN BUILDING K (we

More information

L2TP/IPsec, OpenVPN, MS-SSTP or SSL-VPN protocol. Academic project by

L2TP/IPsec, OpenVPN, MS-SSTP or SSL-VPN protocol. Academic project by Поиск Japan free vpn Le VPN 's Japan VPN server has a fast and reliable connection, whether you're in Japan or just looking to unblock your favorite Japanese websites & shows. Free VPN Service VPNBook.com

More information

Optimising SP Networks with WAN Automation Engine

Optimising SP Networks with WAN Automation Engine Optimising SP Networks with WAN Automation Engine Arman Maghbouleh Senior Director, WAN Orchestration Group #clmel Agenda New Era in Telecommunications Cloud Monetisation, Connectivity Optimisation Cisco

More information

CS6740: Network security

CS6740: Network security Cristina Nita-Rotaru CS6740: Network security Anonymity. Sources 1. Crowds: http://avirubin.com/crowds.pdf 2. Chaum mix: http://www.ovmj.org/gnunet/papers/p84-chaum.pdf 3. Tor: https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf

More information

PrivCount: A Distributed System for Safely Measuring Tor

PrivCount: A Distributed System for Safely Measuring Tor PrivCount: A Distributed System for Safely Measuring Tor Rob Jansen Center for High Assurance Computer Systems Invited Talk, October 4 th, 2016 University of Oregon Department of Computer and Information

More information

The Loopix Anonymity System

The Loopix Anonymity System The Loopix Anonymity System Ania M. Piotrowska 1 Jamie Hayes 1 Tariq Elahi 2 Sebastian Meiser 1 George Danezis 1 1 University College London, UK 2 KU Leuven 1 / 19 Mixnets Background A set of cryptographic

More information

DIY Hosting for Online Privacy

DIY Hosting for Online Privacy DIY Hosting for Online Privacy Shoumik Palkar and Matei Zaharia Stanford University Appeared at HotNets 2017 Before: A Federated Internet The Internet and its protocols were designed to be federated Organizations

More information

Level 1 Technical Firewall Traversal & Security. Level 1 Technical. Firewall Traversal & Security. V2 Page 1 of 16

Level 1 Technical Firewall Traversal & Security. Level 1 Technical. Firewall Traversal & Security. V2 Page 1 of 16 Level 1 Technical Firewall Traversal & Security V2 Page 1 of 16 Contents 1 - Introduction... 3 Introduction... Error! Bookmark not defined. Available Resources... 8 2 - Overview... 4 Level 1 Recap... Error!

More information

Network Security: Anonymity. Tuomas Aura T Network security Aalto University, autumn 2015

Network Security: Anonymity. Tuomas Aura T Network security Aalto University, autumn 2015 Network Security: Anonymity Tuomas Aura T-110.5241 Network security Aalto University, autumn 2015 Outline 1. Anonymity and privacy 2. High-latency anonymous routing 3. Low-latency anonymous routing Tor

More information

Cloud Leased Line (CLL) for Enterprise to Branch Office Communications

Cloud Leased Line (CLL) for Enterprise to Branch Office Communications Cloud Leased Line (CLL) for Enterprise to Branch Office Communications Reliable high throughput data connections with low-cost & diverse transport technologies Executive Summary: The Bonder enables enterprises

More information

2 Application Support via Proxies Onion Routing can be used with applications that are proxy-aware, as well as several non-proxy-aware applications, w

2 Application Support via Proxies Onion Routing can be used with applications that are proxy-aware, as well as several non-proxy-aware applications, w Onion Routing for Anonymous and Private Internet Connections David Goldschlag Michael Reed y Paul Syverson y January 28, 1999 1 Introduction Preserving privacy means not only hiding the content of messages,

More information

2 ND GENERATION ONION ROUTER

2 ND GENERATION ONION ROUTER 2 ND GENERATION ONION ROUTER Roger Dingledine, Nick Mathewson and Paul Syverson Presenter: Alejandro Villanueva Agenda Threat model Cells and circuits Other features Related work How does it work? Rendezvous

More information

TELSTRA CLOUD SERVICES VMWARE VCLOUD AIR PRICING GUIDE

TELSTRA CLOUD SERVICES VMWARE VCLOUD AIR PRICING GUIDE TELSTRA CLOUD SERVICES VMWARE VCLOUD AIR PRICING GUIDE 20 NOVEMBER 2015 WELCOME TO VMWARE VCLOUD AIR SERVICES VMware vcloud Air is a cloud infrastructure offering from Telstra which includes a range of

More information

A Peel of Onion. Paul Syverson U.S. Naval Research Laboratory.

A Peel of Onion. Paul Syverson U.S. Naval Research Laboratory. A Peel of Onion Paul Syverson U.S. Naval Research Laboratory paul.syverson@nrl.navy.mil http://www.syverson.org Our motivation here is not to provide anonymous communication, but to separate identification

More information

VeloCloud Cloud-Delivered WAN Fast. Simple. Secure. KUHN CONSULTING GmbH

VeloCloud Cloud-Delivered WAN Fast. Simple. Secure. KUHN CONSULTING GmbH VeloCloud Cloud-Delivered WAN Fast. Simple. Secure. 1 Agenda 1. Overview and company presentation 2. Solution presentation 3. Main benefits to show to customers 4. Deployment models 2 VeloCloud Company

More information

An Economical and SLO- Guaranteed Cloud Storage Service across Multiple Cloud Service Providers Guoxin Liu and Haiying Shen

An Economical and SLO- Guaranteed Cloud Storage Service across Multiple Cloud Service Providers Guoxin Liu and Haiying Shen An Economical and SLO- Guaranteed Cloud Storage Service across Multiple Cloud Service Providers Guoxin Liu and Haiying Shen Presenter: Haiying Shen Associate professor Department of Electrical and Computer

More information

Empirical Evaluation of Latency-Sensitive Application Performance in the Cloud

Empirical Evaluation of Latency-Sensitive Application Performance in the Cloud Empirical Evaluation of Latency-Sensitive Application Performance in the Cloud Sean Barker and Prashant Shenoy University of Massachusetts Amherst Department of Computer Science Cloud Computing! Cloud

More information

SIMPLE, FLEXIBLE CONNECTIONS FOR TODAY S BUSINESS. Ethernet Services from Verizon

SIMPLE, FLEXIBLE CONNECTIONS FOR TODAY S BUSINESS. Ethernet Services from Verizon SIMPLE, FLEXIBLE CONNECTIONS FOR TODAY S BUSINESS Ethernet Services from Verizon For growing businesses, the network is more important than ever. It s the foundation for all of the technology that helps

More information

AWS: Basic Architecture Session SUNEY SHARMA Solutions Architect: AWS

AWS: Basic Architecture Session SUNEY SHARMA Solutions Architect: AWS AWS: Basic Architecture Session SUNEY SHARMA Solutions Architect: AWS suneys@amazon.com AWS Core Infrastructure and Services Traditional Infrastructure Amazon Web Services Security Security Firewalls ACLs

More information

CIT 668: System Architecture. Amazon Web Services

CIT 668: System Architecture. Amazon Web Services CIT 668: System Architecture Amazon Web Services Topics 1. AWS Global Infrastructure 2. Foundation Services 1. Compute 2. Storage 3. Database 4. Network 3. AWS Economics Amazon Services Architecture Regions

More information

AT&T NetBond User Guide

AT&T NetBond User Guide AT&T NetBond User Guide AWS GovCloud Publication Date: 2/04/2016 Revision: 1.0 2016 AT&T Intellectual Property. All rights reserved. AT&T and the AT&T logo are trademarks of AT&T Intellectual Property.

More information

ThoughtSpot on AWS Quick Start Guide

ThoughtSpot on AWS Quick Start Guide ThoughtSpot on AWS Quick Start Guide Version 4.2 February 2017 Table of Contents Contents Chapter 1: Welcome to ThoughtSpot...3 Contact ThoughtSpot... 4 Chapter 2: Introduction... 6 About AWS...7 Chapter

More information

Anonymous communications: Crowds and Tor

Anonymous communications: Crowds and Tor Anonymous communications: Crowds and Tor Basic concepts What do we want to hide? sender anonymity attacker cannot determine who the sender of a particular message is receiver anonymity attacker cannot

More information

Publius A Robust, Tamper-Evident, Censorship- Resistant Web Publishing System

Publius A Robust, Tamper-Evident, Censorship- Resistant Web Publishing System Publius A Robust, Tamper-Evident, Censorship- Resistant Web Publishing System Publius Pen name used by authors of Federalist Papers Federalist Papers influential in convincing NY voters to ratify US constitution.

More information

Adaptive throttling of Tor clients by entry guards

Adaptive throttling of Tor clients by entry guards Adaptive throttling of Tor clients by entry guards Roger Dingledine arma@torproject.org Tor Tech Report 2010-09-001 September 19, 2010 Abstract Looking for a paper topic (or a thesis topic)? Here s a Tor

More information

Impact of Network Topology on Anonymity and Overhead in Low-Latency Anonymity Networks

Impact of Network Topology on Anonymity and Overhead in Low-Latency Anonymity Networks Impact of Network Topology on Anonymity and Overhead in Low-Latency Anonymity Networks Claudia Diaz 1, Steven J. Murdoch 2, Carmela Troncoso 1 1 K.U.Leuven, ESAT/COSIC 2 University of Cambridge / The Tor

More information

Valet Services: Improving Hidden Servers with a Personal Touch

Valet Services: Improving Hidden Servers with a Personal Touch Valet Services: Improving Hidden Servers with a Personal Touch Lasse Øverlier 1,2 and Paul Syverson 3 1 Norwegian Defence Research Establishment, P.B. 25, 2027 Kjeller, Norway lasse.overlier@ffi.no, http://www.ffi.no/

More information

Accountability and Resource Management

Accountability and Resource Management A discussion of issues for peer-to-peer systems Roger Dingledine Reputation Technologies arma@reputation.com Michael J. Freedman MIT LCS mfreed@mit.edu The Free Haven Project freehaven.net The Resource

More information

Attacking Highspeed Ethernet Links

Attacking Highspeed Ethernet Links Issued by: ERNW GmbH Enno Rey Breslauer Strasse 28 D-69124 Heidelberg www.ernw.de Page: 2 of 7 Content 1 Introduction... 3 1.1 Prerequisites... 3 2 Tackling the Problem... 4 2.1 Tool pcap_extractor...

More information

Traffic Optimization in Anonymous Networks

Traffic Optimization in Anonymous Networks Traffic Optimization in Anonymous Networks Patrik Kristel patrik.kristel@onedata.sk Ján Lučanský jan.lucansky@stuba.sk Ivan Kotuliak ivan.kotuliak@stuba.sk Abstract Anonymous communication networks, such

More information

Service Activation for AT&T NetBond For AT&T Control Center

Service Activation for AT&T NetBond For AT&T Control Center Service Activation for AT&T NetBond For AT&T Control Center Revision: 1.0 2016 AT&T Intellectual Property. All rights reserved. AT&T, the Globe logo, Mobilizing Your World, DIRECTV and other marks are

More information

Lecture 17: Router Design

Lecture 17: Router Design Lecture 17: Router Design CSE 123: Computer Networks Alex C. Snoeren Eample courtesy Mike Freedman Lecture 17 Overview Finish up BGP relationships Router internals Buffering Scheduling 2 Peer-to-Peer Relationship

More information

Valet Services: Improving Hidden Servers with a Personal Touch

Valet Services: Improving Hidden Servers with a Personal Touch Valet Services: Improving Hidden Servers with a Personal Touch (Pre-proceedings Draft) Lasse Øverlier 1,2 and Paul Syverson 3 1 Norwegian Defence Research Establishment, P.B. 25, 2027 Kjeller, Norway lasse.overlier@ffi.no,

More information

Best Practices for Extending the WAN into AWS (IaaS) with SD-WAN

Best Practices for Extending the WAN into AWS (IaaS) with SD-WAN Best Practices for Extending the WAN into AWS (IaaS) with SD-WAN Ariful Huq Product Management @arifulhuq & Rob McBride Marketing @digitalmcb Industry trends impacting networking Cloud Mobile Social 2

More information

SERVERS TO SERVICES HOW MICROSOFT AZURE CAN MODERNISE YOUR IT INFRASTRUCTURE. Joey Lau 9 November 2017

SERVERS TO SERVICES HOW MICROSOFT AZURE CAN MODERNISE YOUR IT INFRASTRUCTURE. Joey Lau 9 November 2017 SERVERS TO SERVICES HOW MICROSOFT AZURE CAN MODERNISE YOUR IT INFRASTRUCTURE Joey Lau 9 November 2017 jlau@infoxchange.org 1 Technology for social justice www.infoxchange.org Sign up for your $5000 Azure

More information

Anonymity Tor Overview

Anonymity Tor Overview Anonymity Tor Overview Andrew Lewman andrew@torproject.org April 21, 2011 Andrew Lewman andrew@torproject.org () Anonymity Tor Overview April 21, 2011 1 / 1 What are we talking about? Crash course on anonymous

More information

Server monitoring for Tor exit nodes

Server monitoring for Tor exit nodes CASE STUDY Server monitoring for Tor exit nodes We had a chance to catch up with Kenan Sulayman, who runs some of the biggest Tor servers in the world. Read on to learn about server monitoring for highthroughput

More information

Tor and circumvention: Lessons learned. Roger Dingledine The Tor Project

Tor and circumvention: Lessons learned. Roger Dingledine The Tor Project Tor and circumvention: Lessons learned Roger Dingledine The Tor Project https://torproject.org/ 1 What is Tor? Online anonymity 1) software, 2) network, 3) protocol Open source, freely available Community

More information