Trawling for Tor Hidden Services: Detection, Measurement, Deanonymization
|
|
|
- Jerome Copeland
- 5 years ago
- Views:
Transcription
1 Trawling for Tor Hidden Services: Detection, Measurement, Deanonymization A. Biryukov, I. Pustogarov, R.P. Weinmann University of Luxembourg May 20, 2013
2 Overview Background Measuring the popularity of hidden services DoSing hidden services. Harvesting onion addresses. Revealing the guards. Opportunistic deanonymisation. 2
3 Overview Background Measuring the popularity of hidden services DoSing hidden services. Harvesting onion addresses. Revealing the guards. Opportunistic deanonymisation. 3
4 Tor anonymity network Client Anonymity R1 R2 Alice R3 R4 R5 Bob 4
5 Tor anonymity network Server Anonymity R1 R2... Alice R3 R4 R5 Bob 5
6 Tor anonymity network... R1 ID BW UPTIME R2 ID BW UPTIME Server Anonymity R3 ID BW UPTIME R4 ID BW UPTIME... R1 R2... Authorities Alice R3 R4 R5 Bob 6
7 Consensus 7
8 Guards R1 Alice R2 R3 Bob Guard = high uptime + high bandwidth Every client has 3 Guard nodes 8
9 Guards R1 Alice R2 R3 Bob Guard = high uptime + high bandwidth Every client has 3 Guard nodes 9
10 Guards Carol R1 Alice R2 R3 Bob Guard = high uptime + high bandwidth Every client has 3 Guard nodes 10
11 Examples of Tor HS 11
12 Examples of Tor HS 12
13 Examples of Tor HS 13
14 Examples of Tor HS 14
15 Examples of Tor HS 15
16 Tor rendezvous protocol HSDir Storage Step1: Bob picks some introduction points and builds circuits to them. IP1 Alice IP2 IP3 Bob 17
17 Tor rendezvous protocol HSDir Storage Step2: Bob advertises his hidden service <z>.onion at the database. IP1 Alice IP2 IDs+ IP3 Bob 18
18 Tor rendezvous protocol HSDir Storage Step3: Alice requests introduction points from the database. She also sets up a rendezvous point. Alice IP1 IP2 RP IP3 Bob 19
19 Tor rendezvous protocol HSDir Storage Step4: Alice sends a message to Bob listing the rendezvous point and asks the introduction points from to deliver it. RP Alice IP1 IP2 RP IP3 Bob 20
20 Tor rendezvous protocol HSDir Storage Step5: Alice and Bob Connect at the Rendezvous point Alice IP1 IP2 RP IP3 Bob 21
21 Tor rendezvous protocol HSDir Storage Alice IP1 IP2 RP IP3 Bob 22
22 Responsible hidden service directories = HSDir = 25 hours of uptime IDs+ HSDir Storage Bob Hash( + + Secret + (0 1) ) 23
23 Responsible hidden service directories = HSDir = 25 hours of uptime IDs+ HSDir Storage Bob Hash( + + Secret + (0 1) ) 24
24 Responsible hidden service directories = HSDir = 25 hours of uptime IDs+ HSDir Storage Bob Hash( + + Secret + (0 1) ) IDs change every 24 hours at some time during the day Re-upload every hour 25
25 Overview Background Measuring the popularity of hidden services DoSing hidden services. Harvesting onion addresses. Revealing the guards. Opportunistic deanonymisation. 27
26 Impersonating Hidden service directory = HSDir = 25 hours of uptime IDs+ HSDir Storage Bob 28
27 Impersonating Hidden service directory = HSDir = 25 hours of uptime IDs+ HSDir Storage Bob 29
28 Impersonating Hidden service directory = HSDir = 25 hours of uptime IDs+ HSDir Storage Bob 30
29 Impersonating Hidden service directory By impersonating 1 directory, we can track the popularity By impersonating all 6 directories, we can DoS. 1 second ~20 seconds 32
30 Tracking popularity We tracked popularity of Skynet C&C, Silkroad, and DuckDuckGo 33
31 Overview Background Measuring the popularity of hidden services DoSing hidden services. Harvesting onion addresses. Revealing the guards. Opportunistic deanonymisation. 34
32 Shadowing Consensus - Active - Shadow Authorities
33 Shadowing Consensus - Active - Shadow Authorities... Authorities Internal database
34 Shadowing Consensus - Active - Shadow Authorities... Authorities Internal database
35 Shadowing Consensus - Active - Shadow Authorities... Authorities Internal database
36 Collecting onion addresses - Active - Shadow 39
37 Collecting onion addresses - Active - Shadow Naive approach will require ~350 IP addresses. 40
38 Collecting onion addresses - Active - Shadow Naive approach will require ~350 IP addresses. Descriptors don't relocate within 24 hours. Prepare shadow HSDir relays and gradually pull to consensus. 41
39 Collecting onion addresses - Active - Shadow Naive approach will require ~350 IP addresses. Descriptors don't relocate within 24 hours. Prepare shadow HSDir relays and gradually pull to consensus
40 Collecting onion addresses - Active - Shadow Naive approach will require ~350 IP addresses. Descriptors don't relocate within 24 hours. Prepare shadow HSDir relays and gradually pull to consensus
41 Collecting onion addresses - Active - Shadow Naive approach will require ~350 IP addresses. Descriptors don't relocate within 24 hours. Prepare shadow HSDir relays and gradually pull to consensus
42 Harvest results We used 58 IP addresses from Amazon EC2 and spent 57 USD We collected unique onion addresses in 49 hours (on hidden wikis one can find ~2500 addresses only) Some interesting note: 12 onion addresses in the form silkroad*****.onion. 46
43 Overview Background Measuring the popularity of hidden services DoSing hidden services. Harvesting onion addresses. Revealing the guards. Opportunistic deanonymisation. 47
44 Revealing Guard Nodes Alice RP Bob 49
45 Revealing Guard Nodes Alice RP Guard Bob 50
46 Revealing Guard Nodes Traffic Signature Eve's Node Eve RP Guard Bob 51
47 Revealing Guard Nodes Traffic Signature Eve's Node Eve RP Guard Bob 52
48 Revealing Guard Nodes Traffic Signature Eve's Node Eve RP Guard Bob ~40 minutes to reveal the guard nodes for a 5Mb/s node 53
49 Opportunistic deanonymisation Eve RP Guard Bob 54
50 Opportunistic deanonymisation Traffic Signature Eve RP Guard How long does it take to become a Guard of a hidden service? Bob 55
51 Opportunistic deanonymisation Rent a server for 60 USD per month => 0.6% probability to be chosen as a Guard. Deanonymisation ~150 hidden services per month (for 60 USD per month) By running 23 such servers, the probability to deanonymize any long-running hidden service within 8 months is 99%. (~ USD total). 56
52 Side effect (flag assignment) Large number of shadow relays with bw <= 1 accelerated flag assignment. Running Fast Stable Guard 57
53 Conclusions Tracking Denial of Service Collecting onion addresses Revealing Guard Nodes Deanonymisation 150 addresses per month (60 USD) Any HS (8 months USD) 58
54 Support slide 1 Triggered #8243: Getting the HSDir flag should require more effort #8243: Getting the HSDir flag should require more effort Related Changing of the Guards: A Framework for Understanding and Improving Entry Guard Selection in Tor", WPES 2012 #8240: Raise our guard rotation period (patch to raise it to 9.5 month still pending) 59
55 Support slide 2 Not included into the presentation Finding guard nodes using topological properties Bandwidth inflation 60
Onion services. Philipp Winter Nov 30, 2015
Onion services Philipp Winter pwinter@cs.princeton.edu Nov 30, 2015 Quick introduction to Tor An overview of Tor Tor is a low-latency anonymity network Based on Syverson's onion routing......which is based
TorScan: Tracing Long-lived Connections and Differential Scanning Attacks
TorScan: Tracing Long-lived Connections and Differential Scanning Attacks A. Biryukov, I. Pustogarov, R.P. Weinmann University of Luxembourg ivan.pustogarov@uni.lu September 5, 2012 A. Biryukov, I. Pustogarov,
Content and popularity analysis of Tor hidden services
1 Content and popularity analysis of Tor hidden services Alex Biryukov, Ivan Pustogarov, Fabrice Thill, Ralf-Philipp Weinmann Abstract Tor hidden services allow running Internet services while protecting
One Fast Guard for Life (or 9 months)
One Fast Guard for Life (or 9 months) Roger Dingledine 1, Nicholas Hopper 2, George Kadianakis 1, and Nick Mathewson 1 1 The Tor Project, https://torproject.org {arma,asn,nickm}@torproject.org 2 University
Tor Hidden Services. Roger Dingledine Free Haven Project Electronic Frontier Foundation.
Tor Hidden Services Roger Dingledine Free Haven Project Electronic Frontier Foundation http://tor.eff.org/ 31 July 2005 Talk Outline Tor overview Circuit-building in Tor Hidden services in Tor Demo Anonymity
OnlineAnonymity. OpenSource OpenNetwork. Communityof researchers, developers,usersand relayoperators. U.S.501(c)(3)nonpro%torganization
The Tor Project Our mission is to be the global resource for technology, advocacy, research and education in the ongoing pursuit of freedom of speech, privacy rights online, and censorship circumvention.
Challenges in protecting Tor hidden services from botnet abuse
Challenges in protecting Tor hidden services from botnet abuse Nicholas Hopper University of Minnesota, Minneapolis, MN USA hopper@cs.umn.edu Abstract. In August 2013, the Tor network experienced a sudden,
Introduction. Overview of Tor. How Tor works. Drawback of Tor s directory server Potential solution. What is Tor? Why use Tor?
Introduction 1 Overview of Tor What is Tor? Why use Tor? How Tor works Encryption, Circuit Building, Directory Server Drawback of Tor s directory server Potential solution Using DNS Security Extension
Tor Hidden Services How Hidden is 'Hidden'?
Tor Hidden Services How Hidden is 'Hidden'? - ICTR Network Expl This information is exempt under the Freedom of Information Act 2000 {FOIA) and may be exempt under other UK information legislation. Refer
THE SECOND GENERATION ONION ROUTER. Roger Dingledine Nick Mathewson Paul Syverson. -Presented by Arindam Paul
THE SECOND GENERATION ONION ROUTER Roger Dingledine Nick Mathewson Paul Syverson 1 -Presented by Arindam Paul Menu Motivation: Why do we need Onion Routing? Introduction : What is TOR? Basic TOR Design
Onion Routing. Varun Pandey Dept. of Computer Science, Virginia Tech. CS 6204, Spring
Onion Routing Varun Pandey Dept. of Computer Science, Virginia Tech 1 What is Onion Routing? a distributed overlay network to anonymize TCP based routing Circuit based (clients choose the circuit) Each
Tor: The Second-Generation Onion Router. Roger Dingledine, Nick Mathewson, Paul Syverson
Tor: The Second-Generation Onion Router Roger Dingledine, Nick Mathewson, Paul Syverson Introduction Second Generation of Onion Routing Focus on deployability Perfect forward secrecy Separation of protocol
0x1A Great Papers in Computer Security
CS 380S 0x1A Great Papers in Computer Security Vitaly Shmatikov http://www.cs.utexas.edu/~shmat/courses/cs380s/ Privacy on Public Networks Internet is designed as a public network Wi-Fi access points,
PrivCount: A Distributed System for Safely Measuring Tor
PrivCount: A Distributed System for Safely Measuring Tor Rob Jansen Center for High Assurance Computer Systems Invited Talk, October 4 th, 2016 University of Oregon Department of Computer and Information
CE Advanced Network Security Anonymity II
CE 817 - Advanced Network Security Anonymity II Lecture 19 Mehdi Kharrazi Department of Computer Engineering Sharif University of Technology Acknowledgments: Some of the slides are fully or partially obtained
Measuring the Tor Network Evaluation of Relays from Public Directory Data
Measuring the Tor Network Evaluation of Relays from Public Directory Data Karsten Loesing karsten@torproject.org Tor Tech Report 2009-06-001 June 22, 2009 Abstract This document contains the results of
Circuit Fingerprinting Attack: Passive Deanonymization of Tor Hidden Services
Circuit Fingerprinting Attack: Passive Deanonymization of Tor Hidden Services Albert Kwon 1 Mashael Saad Al-Sabah 123 David Lazar 1 Marc Dacier 2 Srinivas Devadas 1 1 CSAIL/MIT 2 Qatar Computing Research
A SIMPLE INTRODUCTION TO TOR
A SIMPLE INTRODUCTION TO TOR The Onion Router Fabrizio d'amore May 2015 Tor 2 Privacy on Public Networks Internet is designed as a public network Wi-Fi access points, network routers see all traffic that
2 ND GENERATION ONION ROUTER
2 ND GENERATION ONION ROUTER Roger Dingledine, Nick Mathewson and Paul Syverson Presenter: Alejandro Villanueva Agenda Threat model Cells and circuits Other features Related work How does it work? Rendezvous
Anonymity vs. Privacy
Innovation and Cryptoventures Anonymity vs. Privacy Campbell R. Harvey Duke University, NBER and Investment Strategy Advisor, Man Group, plc January 25, 2017 2 Setting Considerable misunderstanding of
Tor Experimentation Tools
Tor Experimentation Tools Fatemeh Shirazi TU Darmstadt / KU Leuven Darmstadt, Germany fshirazi@cdc.informatik.tu-darmstadt.de Matthias Göhring TU Darmstadt Darmstadt, Germany de.m.goehring@ieee.org Claudia
Tor. Tor Anonymity Network. Tor Basics. Tor Basics. Free software that helps people surf on the Web anonymously and dodge censorship.
Tor Tor Anonymity Network Free software that helps people surf on the Web anonymously and dodge censorship. CS 470 Introduction to Applied Cryptography Ali Aydın Selçuk Initially developed at the U.S.
The Tor Network. Cryptography 2, Part 2, Lecture 6. Ruben Niederhagen. June 16th, / department of mathematics and computer science
The Tor Network Cryptography 2, Part 2, Lecture 6 Ruben Niederhagen June 16th, 2014 Tor Network Introduction 2/33 Classic goals of cryptography: confidentiality, data integrity, authentication, and non-repudiation.
Anonymity C S A D VA N C E D S E C U R I T Y TO P I C S P R E S E N TAT I O N BY: PA N AY I OTO U M A R KO S 4 T H O F A P R I L
Anonymity C S 6 8 2 A D VA N C E D S E C U R I T Y TO P I C S P R E S E N TAT I O N BY: PA N AY I OTO U M A R KO S 4 T H O F A P R I L 2 0 1 9 Tor: The Second- Generation Onion Router R. DINGLEDINE N.
ONIONS ADVENTURES HOW TO USE ONION SERVICES AND THE NETWORK IN YOUR WEB ENDEAVORS hiro@torproject.org https://mastodon.social/@nopressure https://twitter.com/nopressure HI! TOR BOOTH IN BUILDING K (we
Analysis on End-to-End Node Selection Probability in Tor Network
Analysis on End-to-End Node Selection Probability in Tor Network Saurav Dahal 1, Junghee Lee 2, Jungmin Kang 2 and Seokjoo Shin 1 1 Department of Computer Engineering, Chosun University, Gwangju, South
Anonymity With Tor. The Onion Router. July 5, It s a series of tubes. Ted Stevens. Technische Universität München
Anonymity With Tor The Onion Router Nathan S. Evans Christian Grothoff Technische Universität München July 5, 2012 It s a series of tubes. Ted Stevens Overview What is Tor? Motivation Background Material
Privacy Enhancing Technologies
Privacy Enhancing Technologies Marc Juarez COSIC KU Leuven and iminds marc.juarez {at} kuleuven.be SecAppDev, March 2016 Outline 1. Introduction to traffic analysis 2. The traffic analysis threat model
Cryptanalysis of a fair anonymity for the tor network
Cryptanalysis of a fair anonymity for the tor network Amadou Moctar Kane KSecurity, BP 47136, Dakar, Senegal amadou1@gmailcom April 16, 2015 Abstract The aim of this paper is to present an attack upon
Identifying and characterizing Sybils in the Tor network
Identifying and characterizing Sybils in the Tor network August 12, 2016 USENIX Security Symposium Philipp Winter Princeton University and Karlstad University Roya Ensafi Princeton University Karsten Loesing
Challenges in building overlay networks: a case study of Tor. Steven Murdoch Principal Research Fellow University College London
Challenges in building overlay networks: a case study of Steven Murdoch Principal Research Fellow University College London Who uses? Ordinary people e.g. to avoid unscrupulous marketers, protect children,
Virtual Private Services
Virtual Private Services Karsten Loesing and Guido Wirtz karsten@torproject.org, guido.wirtz@uni-bamberg.de Tor Tech Report 2008-07-001 July 25, 2008 Abstract Providing an Internet service is no longer
Dissecting Tor Bridges A Security Evaluation of their Private and Public Infrastructures
Dissecting Tor Bridges A Security Evaluation of their Private and Public Infrastructures Srdjan Matic, Carmela Troncoso, Juan Caballero Dublin 31 March 2017 Privacy in electronic communications Alice Bob
Genuine onion: Simple, Fast, Flexible, and Cheap Website Authentication
Genuine onion: Simple, Fast, Flexible, and Cheap Website Authentication Paul Syverson U.S. Naval Research Laboratory a f joint work with Griffin Boyce Open Internet Tools Project IEEE Web 2.0 Security
LINKING TOR CIRCUITS
LINKING TOR CIRCUITS MSc Information Security, 2014 University College London Otto Huhta Supervisor: Dr George Danezis This report is submitted as part requirement for the MSc in Information Security at
Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms. EJ Jung
Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms EJ Jung Goals 1. Hide what you wrote encryption of any kind symmetric/asymmetric/stream 2. Hide to whom you sent and when pseudonym?
Guard Sets in Tor using AS Relationships
Proceedings on Privacy Enhancing Technologies ; 218 (1):145 165 Mohsen Imani*, Armon Barton, and Matthew Wright Guard Sets in Tor using AS Relationships Abstract: The mechanism for picking guards in Tor
Deanonymizing Tor. Colorado Research Institute for Security and Privacy. University of Denver
Deanonymizing Tor Nathan S. Evans Nathan.S.Evans@du.edu Christian Grothoff christian@grothoff.org Colorado Research Institute for Security and Privacy University of Denver 1 Motivation Tor is probably
COMPUTER & NETWORK SECURITY
COMPUTER & NETWORK SECURITY Lecture 7: Key Management CRYPTOBULLETIN: IN THE LAST WEEK OpenSSL Patch to Plug Severe Security Holes http://krebsonsecurity.com/2015/03/openssl patch to plug severe security
Tor: An Anonymizing Overlay Network for TCP
Tor: An Anonymizing Overlay Network for TCP Roger Dingledine The Free Haven Project http://tor.freehaven.net/ http://tor.eff.org/ December 28, 21C3 2004 Talk Outline Motivation: Why anonymous communication?
Analysing Onion Routing Bachelor-Thesis
Analysing Onion Routing Bachelor-Thesis Steffen Michels June 22, 2009 Abstract Although methods for reaching security goals such as secrecy, integrity and authentication are widely used in the Internet,
Avoiding The Man on the Wire: Improving Tor s Security with Trust-Aware Path Selection
Avoiding The Man on the Wire: Improving Tor s Security with Trust-Aware Path Selection Aaron Johnson Rob Jansen Aaron D. Jaggard Joan Feigenbaum Paul Syverson (U.S. Naval Research Laboratory) (U.S. Naval
Anonymity With Tor. The Onion Router. July 21, Technische Universität München
The Onion Router Nathan S. Evans Christian Grothoff Technische Universität München July 21, 2011 Overview What is Tor? Motivation Background Material How Tor Works Hidden Services Attacks Specific Attack
Hidden-service statistics reported by relays
Hidden-service statistics reported by relays David Goulet The Tor Project dgoulet@torproject.org George Kadianakis The Tor Project asn@torproject.org Aaron Johnson U.S. Naval Research Laboratory aaron.m.johnson@nrl.navy.mil
Hiding Amongst the Clouds
Hiding Amongst the Clouds A Proposal for Cloud-based Onion Routing Nicholas Jones Matvey Arye Jacopo Cesareo Michael J. Freedman Princeton University https://www.torproject.org/about/overview.html We and
The Onion Routing Performance using Shadowplugin-TOR
The Onion Routing Performance using Shadowplugin-TOR Hartanto Kusuma Wardana, Liauw Frediczen Handianto, Banu Wirawan Yohanes * Faculty of Electronic and Computer Engineering Universitas Kristen Satya
PuppeTor. Performing automatic tests and measurements in Tor networks. Karsten Loesing. Distributed and Mobile Systems Group, University of Bamberg
PuppeTor Performing automatic tests and measurements in Tor networks Karsten Loesing Distributed and Mobile Systems Group, University of Bamberg PET-Con 2007, Frankfurt, 2007-08-16 Karsten Loesing (University
Safely Measuring Tor. Rob Jansen U.S. Naval Research Laboratory Center for High Assurance Computer Systems
Safely Measuring Tor Safely Measuring Tor, Rob Jansen and Aaron Johnson, In the Proceedings of the 23rd ACM Conference on Computer and Communication Security (CCS 2016). Rob Jansen Center for High Assurance
Tor: Online anonymity, privacy, and security.
Tor: Online anonymity, privacy, and security. Runa A. Sandvik runa@torproject.org 12 September 2011 Runa A. Sandvik runa@torproject.org () Tor: Online anonymity, privacy, and security. 12 September 2011
Safely Measuring Tor. Rob Jansen U.S. Naval Research Laboratory Center for High Assurance Computer Systems
Safely Measuring Tor Safely Measuring Tor, Rob Jansen and Aaron Johnson, In the Proceedings of the 23rd ACM Conference on Computer and Communication Security (CCS 2016). Rob Jansen Center for High Assurance
Introduction to Modern Cryptography. Benny Chor
Introduction to Modern Cryptography Benny Chor Identification (User Authentication) Fiat-Shamir Scheme Lecture 12 Tel-Aviv University 4 January 2010 Model and Major Issues Alice wishes to prove to Bob
E-cash. Cryptography. Professor: Marius Zimand. e-cash. Benefits of cash: anonymous. difficult to copy. divisible (you can get change)
Cryptography E-cash Professor: Marius Zimand e-cash Benefits of cash: anonymous difficult to copy divisible (you can get change) easily transferable There are several protocols for e-cash. We will discuss
Dropping on the Edge: Flexibility and Traffic Confirmation in Onion Routing Protocols
Proceedings on Privacy Enhancing Technologies ; 2018 (2):27 46 Florentin Rochet* and Olivier Pereira Dropping on the Edge: Flexibility and Traffic Confirmation in Onion Routing Protocols Abstract: The
Adaptive throttling of Tor clients by entry guards
Adaptive throttling of Tor clients by entry guards Roger Dingledine arma@torproject.org Tor Tech Report 2010-09-001 September 19, 2010 Abstract Looking for a paper topic (or a thesis topic)? Here s a Tor
The power of Blockchain: Smart Contracts. Foteini Baldimtsi
The power of Blockchain: Smart Contracts Foteini Baldimtsi The Blockchain at the heart of a cryptocurrency Alice sends 2 John sends 1 Dave sends 5 to Bob to Eve to Alice Bob sends 1 Eve sends 4 to Dave
Protocols for Anonymous Communication
18734: Foundations of Privacy Protocols for Anonymous Communication Anupam Datta CMU Fall 2016 Privacy on Public Networks } Internet is designed as a public network } Machines on your LAN may see your
CS6740: Network security
Cristina Nita-Rotaru CS6740: Network security Anonymity. Sources 1. Crowds: http://avirubin.com/crowds.pdf 2. Chaum mix: http://www.ovmj.org/gnunet/papers/p84-chaum.pdf 3. Tor: https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf
P 5 : A Protocol for Scalable Anonymous Communications
P 5 : A Protocol for Scalable Anonymous Communications 1 P 5 : A Protocol for Scalable Anonymous Communications Rob Sherwood, Bobby Bhattacharjee, Aravind Srinivasan University of Maryland, College Park
Putting the P back in VPN: An Overlay Network to Resist Traffic Analysis
Putting the P back in VPN: An Overlay Network to Resist Traffic Analysis Roger Dingledine The Free Haven Project http://freehaven.net/ Black Hat 2004 July 29, 2004 Talk Outline Motivation: Why anonymous
Introducing SOR: SSH-based Onion Routing
Introducing SOR: SSH-based Onion Routing André Egners Dominik Gatzen Andriy Panchenko Ulrike Meyer 28th of March 2012 On the Internet......nobody knows you re a dog [1993] Introduction Motivation (1) encryption
A Peel of Onion. Paul Syverson U.S. Naval Research Laboratory.
A Peel of Onion Paul Syverson U.S. Naval Research Laboratory paul.syverson@nrl.navy.mil http://www.syverson.org Our motivation here is not to provide anonymous communication, but to separate identification
Anonymity. Assumption: If we know IP address, we know identity
03--4 Anonymity Some degree of anonymity from using pseudonyms However, anonymity is always limited by address TCP will reveal your address address together with ISP cooperation Anonymity is broken We
Anonymity in P2P Systems
Anonymity in P2P Systems Protecting User Presence by Hiding Tor Hidden Service Activity Karsten Loesing Distributed and Mobile Systems Group, University of Bamberg 1. Bamberger-Zwickauer Workshop, 2007-06-14
Computer Security Spring 2010 Paxson/Wagner HW 4. Due Thursday April 15, 5:00pm
CS 161 Computer Security Spring 2010 Paxson/Wagner HW 4 Due Thursday April 15, 5:00pm Instructions: Submit your solution by Thursday, April 15, 5:00pm electronically. Write up your answers in either PDF
CS Paul Krzyzanowski
Computer Security 17. Tor & Anonymous Connectivity Anonymous Connectivity Paul Krzyzanowski Rutgers University Spring 2018 1 2 Anonymity on the Internet Often considered bad Only criminals need to hide
Peeling Onions Understanding and using
hiro@torproject.org Peeling Onions Understanding and using the network Know your onions What is Tor and what it can do for you. How Tor provides privacy and anonymity Using Tor at the application layer:
How Alice and Bob meet if they don t like onions
How Alice and Bob meet if they don t like onions Survey of Network Anonymisation Techniques Erik Sy 34th Chaos Communication Congress, Leipzig Agenda 1. Introduction to Anonymity Networks Anonymity Strategies
Locating Hidden Servers
Locating Hidden Servers Lasse Øverlier Norwegian Defence Research Establishment and Gjøvik University College lasse.overlier@{ffi,hig}.no Paul Syverson Naval Research Laboratory syverson@itd.nrl.navy.mil
Valet Services: Improving Hidden Servers with a Personal Touch
Valet Services: Improving Hidden Servers with a Personal Touch (Pre-proceedings Draft) Lasse Øverlier 1,2 and Paul Syverson 3 1 Norwegian Defence Research Establishment, P.B. 25, 2027 Kjeller, Norway lasse.overlier@ffi.no,
Anonymous communications: Crowds and Tor
Anonymous communications: Crowds and Tor Basic concepts What do we want to hide? sender anonymity attacker cannot determine who the sender of a particular message is receiver anonymity attacker cannot
The state of academic research in Tor
Linus Nordberg, NORDUnet linus@nordu.net 0x23291265 FRISC winter school, Finse, Norway What is Tor? How does Tor work? Overview Circuits and cell encryption The trust root Onion services Academic research
The New Cell-Counting-Based Against Anonymous Proxy
The New Cell-Counting-Based Against Anonymous Proxy Yadarthugalla Raju M.Tech Student, Department of CSE, Dr.K.V.S.R.I.T, Kurnool. K. Pavan Kumar Assistant Professor, Department of IT, Dr.K.V.S.R.I.T,
CS 134 Winter Privacy and Anonymity
CS 134 Winter 2016 Privacy and Anonymity 1 Privacy Privacy and Society Basic individual right & desire Relevant to corporations & government agencies Recently increased awareness However, general public
Computer Security. 15. Tor & Anonymous Connectivity. Paul Krzyzanowski. Rutgers University. Spring 2017
Computer Security 15. Tor & Anonymous Connectivity Paul Krzyzanowski Rutgers University Spring 2017 April 24, 2017 CS 419 2017 Paul Krzyzanowski 1 Private Browsing Browsers offer a "private" browsing modes
Private Browsing. Computer Security. Is private browsing private? Goal. Tor & The Tor Browser. History. Browsers offer a "private" browsing modes
Private Browsing Computer Security 16. Tor & Anonymous Connectivity Paul Krzyzanowski Rutgers University Spring 2017 Browsers offer a "private" browsing modes Apple Private Browsing, Mozilla Private Browsing,
Anonymity. With material from: Dave Levin and Michelle Mazurek
http://www.sogosurvey.com/static/sogo_resp_images/tat_resp_images/designimg/guaranteed-anonymous-survey.png Anonymity With material from: Dave Levin and Michelle Mazurek What is anonymity? Dining cryptographers
Detecting Denial of Service Attacks in Tor
Norman Danner Danny Krizanc Marc Liberatore Department of Mathematics and Computer Science Wesleyan University Middletown, CT 06459 USA Financial Cryptography and Data Security 2009 Outline 1 Background
INSE 6110 Midterm LAST NAME FIRST NAME. Fall 2016 Duration: 80 minutes ID NUMBER. QUESTION Total GRADE. Notes:
A INSE 6110 Midterm Fall 2016 Duration: 80 minutes LAST NAME FIRST NAME ID NUMBER QUESTION 1 2 3 4 Total GRADE Notes: 1) Calculator (non-programming) allowed, nothing else permitted 2) Each page contains
Privacy SPRING 2018: GANG WANG
Privacy SPRING 2018: GANG WANG Privacy in Computing Location privacy Anonymous web surfing Data loss prevention Data mining privacy 3 LOCATION Privacy Location Privacy Pervasive use of GPS-enabled mobile
CS232. Lecture 21: Anonymous Communications
CS232 Lecture 21: Anonymous Communications November 21, 2018 2 You Are Not Anonymous 3 Your IP address can be linked directly to you ISPs store communications records Usually for several years (Data Retention
Semi-Joins and Bloom Join. Databases: The Complete Book Ch 20
Semi-Joins and Bloom Join Databases: The Complete Book Ch 20 1 Practical Concerns UNION R1 S1 R1 S2 R2 S1 RN SM R1 R2 RN S1 S2 SM 2 Practical Concerns UNION R1 S1 R1 S2 R2 S1 RN SM R1 R2 RN S1 S2 SM Where
Stadium. A Distributed Metadata-private Messaging System. Matei Zaharia Nickolai Zeldovich SOSP 2017
Stadium A Distributed Metadata-private Messaging System Nirvan Tyagi Yossi Gilad Derek Leung Matei Zaharia Nickolai Zeldovich SOSP 2017 Previous talk: Anonymous broadcast This talk: Private messaging Alice
MASSACHUSETTS INSTITUTE OF TECHNOLOGY Fall Quiz II
Department of Electrical Engineering and Computer Science MASSACHUSETTS INSTITUTE OF TECHNOLOGY 6.893 Fall 2009 Quiz II All problems are open-ended questions. In order to receive credit you must answer
Public-key cryptography in Tor and pluggable transports
Public-key cryptography in Tor and pluggable transports Tanja Lange Technische Universiteit Eindhoven 09 June 2016 1 / 17 Tor Attend Roger s talk on Friday. 2 / 17 Motivation Sender Jefferson Network Eavesdropper
ENEE 459-C Computer Security. Security protocols
ENEE 459-C Computer Security Security protocols Key Agreement: Diffie-Hellman Protocol Key agreement protocol, both A and B contribute to the key Setup: p prime and g generator of Z p *, p and g public.
Using Chains for what They re Good For
Using Chains for what They re Good For Andrew Poelstra usingchainsfor@wpsoftware.net Scaling Bitcoin, November 5, 2017 1 / 14 On-Chain Smart Contracting Bitcoin (and Ethereum, etc.) uses a scripting language
Tor, a quick overview
Tor, a quick overview Linus Nordberg The Tor Project https://torproject.org/ 1 What is Tor Online anonymity: 1. software, 2. network, 3. protocol Open source, freely available Community
ENEE 459-C Computer Security. Security protocols (continued)
ENEE 459-C Computer Security Security protocols (continued) Key Agreement: Diffie-Hellman Protocol Key agreement protocol, both A and B contribute to the key Setup: p prime and g generator of Z p *, p
RAPTOR: Routing Attacks on Privacy in Tor. Yixin Sun. Princeton University. Acknowledgment for Slides. Joint work with
RAPTOR: Routing Attacks on Privacy in Tor Yixin Sun Princeton University Joint work with Annie Edmundson, Laurent Vanbever, Oscar Li, Jennifer Rexford, Mung Chiang, Prateek Mittal Acknowledgment for Slides
Valet Services: Improving Hidden Servers with a Personal Touch
Valet Services: Improving Hidden Servers with a Personal Touch Lasse Øverlier 1,2 and Paul Syverson 3 1 Norwegian Defence Research Establishment, P.B. 25, 2027 Kjeller, Norway lasse.overlier@ffi.no, http://www.ffi.no/
Inside Job: Applying Traffic Analysis to Measure Tor from Within
Inside Job: Applying Traffic Analysis to Measure Tor from Within Rob Jansen, Marc Juarez, Rafa Gálvez, Tariq Elahi and Claudia Diaz U.S. Naval Research Laboratory, rob.g.jansen@nrl.navy.mil imec-cosic
DISSENT: Accountable, Anonymous Communication
DISSENT: Accountable, Anonymous Communication Joan Feigenbaum http://www.cs.yale.edu/homes/jf/ Joint work with Bryan Ford (PI), Henry Corrigan Gibbs, Ramakrishna Gummadi, Aaron Johnson (NRL), Vitaly Shmatikov
Revisiting Circuit Clogging Attacks on Tor
Revisiting Circuit Clogging Attacks on Tor Eric Chan-Tin, Jiyoung Shin and Jiangmin Yu Department of Computer Science Oklahoma State University {chantin, jiyoung, jiangmy}@cs.okstate.edu Abstract Tor is
Catena: Preventing Lies with
November 28th, 2016 Catena: Preventing Lies with Alin Tomescu alinush@mit.edu MIT CSAIL Srinivas Devadas devadas@mit.edu MIT CSAIL New England Security Day (NESD), Fall '16 The problem: Equivocation The
Moving Tor Circuits Towards Multiple-Path: Anonymity and Performance Considerations
Moving Tor Circuits Towards Multiple-Path: Anonymity and Performance Considerations F. Rochet Universite Catholique de Louvain ICTEAM Crypto Group Louvain-la-Neuve, Belgium O. Pereira Universite Catholique
You are the internet
The Onion Router Hello World I'm Tony I am interested in the concept of security I work for a local ISP / MSP I like skills sharing / access to knowledge Hackspaces are awesome 2 You are the internet DEMO
The Loopix Anonymity System
The Loopix Anonymity System Ania M. Piotrowska 1 Jamie Hayes 1 Tariq Elahi 2 Sebastian Meiser 1 George Danezis 1 1 University College London, UK 2 KU Leuven 1 / 19 Mixnets Background A set of cryptographic
Scalable privacy-enhanced traffic monitoring in vehicular ad hoc networks
Scalable privacy-enhanced traffic monitoring in vehicular ad hoc networks Yi Liu1,2,3 Jie Ling 1 Qianhong Wu4,6 Bo Qin5 Presented By Khaled Rabieh Introduction & Problem Statement In traffic monitoring
Dr. Jinyuan (Stella) Sun Dept. of Electrical Engineering and Computer Science University of Tennessee Fall 2010
Dr. Jinyuan (Stella) Sun Dept. of Electrical Engineering and Computer Science University of Tennessee Fall 2010 1 Photuris and SKIP PHASE 1 IKE PHASE 2 IKE How is SA established? How do parties negotiate
A Modern Congestion Attack on Tor Using Long Paths
A Modern Congestion Attack on Tor Using Long Paths Towards Nathan S. Evans 1 Christian Grothoff 1 Roger Dingledine 2 1 University of Denver, Denver CO 2 The Tor Project June, 22 2009 Why attack Tor? Tor