A new cell-counting-based attack against tor

IEEE/ACM Transactions on Networking

Volumn 20, Issue 4, 2012, Pages 1245-1261

  Ling, Zhen ^a   Luo, Junzhou ^a   Yu, Wei ^b   Fu, Xinwen ^c   Xuan, Dong ^d   Jia, Weijia ^e  

^a SOUTHEAST UNIVERSITY   (China)

^b TOWSON UNIVERSITY   (United States)

^c University of Massachusetts Lowell   (United States)

^d The Ohio State University   (United States)

^e CITY UNIVERSITY OF HONG KONG   (Hong Kong)

Author keywords

Anonymity; cell counting; mix networks; signal; Tor

Indexed keywords

ANONYMITY; CELL COUNTING; MIX NETWORKS; SIGNAL; TOR;

COMMUNICATION SYSTEMS; CYTOLOGY; SIGNAL DETECTION;

CELLS;

EID: 84865344045     PISSN: 10636692     EISSN: None     Source Type: Journal    
DOI: 10.1109/TNET.2011.2178036     Document Type: Article

References (45)

1. Q. X. Sun, D. R. Simon, Y. Wang, W. Russell, V. N. Padmanabhan, and L. L. Qiu, "Statistical identification of encrypted Web browsing traffic," in Proc. IEEE S&P, May 2002, pp. 19-30. (Pubitemid 34648101)
2. X. Fu,Y. Zhu, B.Graham, R. Bettati, andW. Zhao, "On flow marking attacks in wireless anonymous communication networks," in Proc. IEEE ICDCS, Apr. 2005, pp. 493-503.
3. L. Øverlier and P. Syverson, "Locating hidden servers," in Proc. IEEE S&P, May 2006, pp. 100-114. (Pubitemid 44753715)
4. G. Danezis, R. Dingledine, and N. Mathewson, "Mixminion: Design of a type III anonymous remailer protocol," in Proc. IEEE S&P, May 2003, pp. 2-15.
5. R. Dingledine, N. Mathewson, and P. Syverson, "Tor: The secondgeneration onion router," in Proc. 13th USENIX Security Symp., Aug. 2004, p. 21.
6. "Anonymizer, Inc.," 2009 [Online]. Available: http://www. anonymizer.com/
7. A. Serjantov and P. Sewell, "Passive attack analysis for connectionbased anonymity systems," in Proc. ESORICS,Oct. 2003, pp. 116-131. (Pubitemid 37311866)
8. B. N. Levine,M. K. Reiter, C.Wang, andM. Wright, "Timing attacks in low-latency MIX systems," in Proc. FC, Feb. 2004, pp. 251-565.
9. Y. Zhu, X. Fu, B. Graham, R. Bettati, and W. Zhao, "On flow correlation attacks and countermeasures in Mix networks," in Proc. PET, May 2004, pp. 735-742.
10. S. J. Murdoch and G. Danezis, "Low-cost traffic analysis of Tor," in Proc. IEEE S&P, May 2006, pp. 183-195. (Pubitemid 41543655)
11. K. Bauer, D. McCoy, D. Grunwald, T. Kohno, and D. Sicker, "Lowresource routing attacks against anonymous systems," in Proc. ACM WPES, Oct. 2007, pp. 11-20.
12. X.Wang, S. Chen, and S. Jajodia, "Network flow watermarking attack on low-latency anonymous communication systems," in Proc. IEEE S&P, May 2007, pp. 116-130. (Pubitemid 47432521)
13. W. Yu, X. Fu, S. Graham, D. Xuan, and W. Zhao, "DSSS-based flow marking technique for invisible traceback," in Proc. IEEE S&P, May 2007, pp. 18-32. (Pubitemid 47432513)
14. N. B. Amir Houmansadr and N. Kiyavash, "RAINBOW: A robust and invisible non-blind watermark for network flows," inProc. 16th NDSS, Feb. 2009, pp. 1-13.
15. V. Shmatikov and M.-H. Wang, "Timing analysis in low-latency MIX networks: Attacks and defenses," in Proc. ESORICS, 2006, pp. 18-31.
16. V. Fusenig, E. Staab, U. Sorger, and T. Engel, "Slotted packet counting attacks on anonymity protocols," in Proc. AISC, 2009, pp. 53-60.
17. X. Wang, S. Chen, and S. Jajodia, "Tracking anonymous peer-to-peer VoIP calls on the internet," in Proc. 12th ACM CCS, Nov. 2005, pp. 81-91. (Pubitemid 44021992)
18. K. Bauer, D. McCoy, D. Grunwald, T. Kohno, and D. Sicker, "Lowresource routing attacks against anonymous systems," Univ. Colorado Boulder, Boulder, CO, Tech. Rep., Aug. 2007.
19. X. Fu, Z. Ling, J. Luo, W. Yu,W. Jia, and W. Zhao, "One cell is enough to break Tor's anonymity," in Proc. Black Hat DC, Feb. 2009 [Online]. Available: http://www.blackhat.com/presentations/bh-dc-09/Fu/BlackHat- DC-09-Fu-Break-Tors-Anonymity.pdf
20. R. Dingledine, N. Mathewson, and P. Syverson, "Tor: Anonymity online," 2008 [Online]. Available: http://tor.eff.org/index.html.en
21. R. Dingledine and N. Mathewson, "Tor protocol specification," 2008 [Online]. Available: https://gitweb.torproject.org/torspec.git?a=blob- plain;hb=HEAD;f=tor-spec.txt
22. J. Reardon, "Improving Tor using a TCP-over-DTLS tunnel," Master's thesis, University of Waterloo, Waterloo, ON, Canada, Sep. 2008.
23. R. Dingledine and N. Mathewson, "Tor path specification," 2008 [Online]. Available: https://gitweb.torproject.org/torspec. git?a=blob-plain;hb= HEAD;f=path-spec.txt
24. X. Fu, Z. Ling, W. Yu, and J. Luo, "Network forensics through cloud computing," in Proc. 1st ICDCS-SPCC, Jun. 2010, pp. 26-31.
25. M. Perry, "TorFlow: Tor network analysis," in Proc. 2nd HotPETs, 2009, pp. 1-14.
26. R. Pries, W. Yu, S. Graham, and X. Fu, "On performance bottleneck of anonymous communication networks," in Proc. 22nd IEEE IPDPS, Apr. 14-28, 2008, pp. 1-11.
27. G. Smillie, Analogue, Digital Communication Techniques. London, U.K.: Butterworth-Heinemann, 1999.
28. N. S. Evans, R. Dingledine, and C. Grothoff, "A practical congestion attack on Tor using long paths," in Proc. 18th USENIX Security Symp., Aug. 10-14, 2009, pp. 33-50.
29. S. J. Murdoch, "Hot or not: Revealing hidden services by their clock skew," in Proc. 13th ACM CCS, Nov. 2006, pp. 27-36. (Pubitemid 47131353)
30. R. Pries, W. Yu, X. Fu, and W. Zhao, "A new replay attack against anonymous communication networks," in Proc. IEEE ICC, May 19-23, 2008, pp. 1578-1582.
31. D. Mccoy, K. Bauer, D. Grunwald, T. Kohno, and D. Sicker, "Shining light in dark places: Understanding the Tor network," in Proc. 8th PETS, 2008, pp. 63-76.
32. S. U. Khaunte and J. O. Limb, "Packet-level traffic measurements from a Tier-1 IP backbone," Georgia Institute of Technology, Atlanta, GA, Tech. Rep., 1997.
33. T. M. Cover and J.A. Thomas, Elements of Information Theory. New York: Wiley-Interscience, 1991.
34. S. Verdu, "On channel capacity per unit cost," IEEE Trans. Inf. Theory, vol. 36, no. 5, pp. 1019-1030, Nov. 1990. (Pubitemid 20738361)
35. "Tor: Anonymity online," The Tor Project, Inc., 2008 [Online]. Available: http://tor.eff.org/
36. "PlanetLab An open platform for developing, deploying, and accessing planetary-scale services," PlanetLab, 2011 [Online]. Available: http://www.planet-lab.org/
37. N. Kiyavash, A. Houmansadr, and N. Borisov, "Multi-flow attacks against network flow watermarking schemes," in Proc. USENIX Security Symp., 2008, pp. 307-320.
38. Z. Ling, J. Luo, W. Yu, and X. Fu, "Equal-sized cellsmean equal-sized packets in Tor?," in Proc. IEEE ICC, Jun. 2011, pp. 1-6.
39. D. X. Song, D. Wagner, and X. Tian, "Timing analysis of keystrokes and timing attacks on SSH," in Proc. 10th USENIX Security Symp., Aug. 2001, p. 25.
40. M. Liberatore and B. N. Levine, "Inferring the source of encrypted HTTP connections," in Proc. ACM CCS, Oct. 2006, pp. 255-263. (Pubitemid 47131374)
41. C. V.Wright, L. Ballard, F. Monrose, and G.M.Masson, "Language identification of encrypted VoIP traffic: Alejandra y Roberto or Alice and Bob?," in Proc. 16th Annu. USENIX Security Symp., Aug. 2007, pp. 43-54.
42. C. V.Wright, L. Ballard, S. E. Coull, F.Monrose, and G. M. Masson, "Spot me if you can: Uncovering spoken phrases in encrypted VoIP conversation," in Proc. IEEE S&P, May 2008, pp. 35-49.
43. X. Wang and D. S. Reeves, "Robust correlation of encrypted attack traffic through stepping stones by manipulation of inter-packet delays," in Proc. ACM CCS, Nov. 2003, pp. 20-29. (Pubitemid 40673785)
44. P. Peng, P. Ning, and D. S. Reeves, "On the secrecy of timing-based active watermarking trace-back techniques," in Proc. IEEE S&P, May 2006, pp. 335-349.
45. Y. J. Pyun, Y. H. Park, X. Wang, D. S. Reeves, and P. Ning, "Tracing traffic through intermediate hosts that repacketize flows," in Proc. IEEE INFOCOM, May 2007, pp. 634-642. (Pubitemid 47334280)