Changing of the guards: A framework for understanding and improving entry guard selection in Tor

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2012, Pages 43-53

  Elahi, Tariq ^a   Bauer, Kevin ^a   Alsabah, Mashael ^a   Dingledine, Roger ^b   Goldberg, Ian ^a  

^a UNIVERSITY OF WATERLOO   (Canada)

^b Tor Project Inc   (United States)

Author keywords

Entry guard; Predecessor attack; Quality of service; Tor

Indexed keywords

ANONYMITY NETWORKS; ENTRY GUARD; ENTRY POINT; LOW-LATENCY; PREDECESSOR ATTACK; ROTATION ALGORITHM; SECURITY AND PERFORMANCE; SECURITY GOALS; SELECTION ALGORITHM; TOR;

ALGORITHMS; DESIGN; OVERLAY NETWORKS; QUALITY OF SERVICE;

NETWORK SECURITY;

EID: 84869175529     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2381966.2381973     Document Type: Conference Paper

References (18)

1. ABBOTT, T. G., LAI, K. J., LIEBERMAN, M. R., AND PRICE, E. C. Browser-based Attacks on Tor. In Proceedings of the 7th International Conference on Privacy Enhancing Technologies (Berlin, Heidelberg, 2007), Springer-Verlag, pp. 184-199.
2. BAUER, K., AND MCCOY, D. Tor specification proposal 107: Uptime Sanity Checking. https://gitweb.torproject.org/torspec.git/blob-plain/HEAD:/proposals/ 107-uptime-sanity-checking.txt, March 2007.
3. BAUER, K., AND MCCOY, D. Tor specification proposal 109: No more than one server per IP address. https://gitweb.torproject.org/torspec.git/blob-plain/ HEAD:/proposals/109-no-sharing-ips.txt, March 2007.
4. BAUER, K., MCCOY, D., GRUNWALD, D., KOHNO, T., AND SICKER, D. Low-Resource Routing Attacks against Tor. In Proceedings of the Workshop on Privacy in the Electronic Society (October 2007), pp. 11-20.
5. BORISOV, N., DANEZIS, G., MITTAL, P., AND TABRIZ, P. Denial of service or denial of security? In Proceedings of the 14th ACM conference on Computer and communications security (New York, NY, USA, 2007), CCS '07, ACM, pp. 92-102.
6. DANEZIS, G. The traffic analysis of continuous-time mixes. In Proceedings of Privacy Enhancing Technologies workshop (PET 2004) (May 2004), vol. 3424 of LNCS, pp. 35-50.
7. DANEZIS, G., AND SYVERSON, P. Bridging and Fingerprinting: Epistemic Attacks on Route Selection. In Proceedings of the Eighth International Symposium on Privacy Enhancing Technologies (PETS 2008) (Leuven, Belgium, July 2008), N. Borisov and I. Goldberg, Eds., Springer, pp. 133-150.
8. DINGLEDINE, R. Research problem: better guard rotation parameters. https://blog.torproject.org/blog/researchproblem-better-guard-rotation- parameters August 2011. Accessed May 2012.
9. DINGLEDINE, R., MATHEWSON, N., AND SYVERSON, P. Tor: The second-generation onion router. In Proceedings of the 13th conference on USENIX Security Symposium-Volume 13 (2004), USENIX Association, pp. 303-320.
10. EDMAN, M., AND SYVERSON, P. F. AS-awareness in tor path selection. In Proceedings of the 2009 ACM Conference on Computer and Communications Security, CCS 2009, Chicago, Illinois, USA, November 9-13, 2009 (2009), E. Al-Shaer, S. Jha, and A. D. Keromytis, Eds., ACM, pp. 380-389.
11. MURDOCH, S. J., AND WATSON, R. N. M. Metrics for security and performance in low-latency anonymity networks. In Proceedings of the Eighth International Symposium on Privacy Enhancing Technologies (PETS 2008) (Leuven, Belgium, July 2008), N. Borisov and I. Goldberg, Eds., Springer, pp. 115-132.
12. MURDOCH, S. J., AND ZIELIN ́ SKI, P. Sampled traffic analysis by internet-exchange-level adversaries. In Proceedings of the Seventh Workshop on Privacy Enhancing Technologies (PET 2007) (Ottawa, Canada, June 2007), N. Borisov and P. Golle, Eds., Springer.
13. ØVERLIER, L., AND SYVERSON, P. Locating Hidden Servers. In Symposium on Security and Privacy (2006), IEEE, pp. 100-114.
14. PERRY, M. Torflow: Tor network analysis. HotPETS, 2009.
15. THE TOR PROJECT. Tor Directory Protocol, Version 3. https://gitweb. torproject.org/torspec.git?a=blob-plain;hb=HEAD;f=dir-spec.txt. Accessed May 2012.
16. THE TOR PROJECT. Tor Metrics Portal: Data. https://metrics.torproject. org/data.html#performance. Accessed January 2012.
17. WRIGHT, M., ADLER, M., LEVINE, B., AND SHIELDS, C. Defending Anonymous Communications against Passive Logging Attacks. In Proceedings of the IEEE Symposium on Security and Privacy (2003), pp. 28-41.
18. WRIGHT, M., ADLER, M., LEVINE, B., AND SHIELDS, C. The predecessor attack: An analysis of a threat to anonymous communications systems. ACM Transactions on Information and System Security (TISSEC) 7, 4 (2004), 489-522.