abstract - krest technology摘要：克利斯特技术

《abstract - krest technology摘要：克利斯特技术》由会员上传分享，免费在线阅读，更多相关内容在应用文档-天天文库。

1、ANewCell-Counting-BasedAttackAgainstTorAbstract:Variouslow-latencyanonymouscommunicationsystemssuchasTorandAnonymizerhavebeendesignedtoprovideanonymityserviceforusers.Inordertohidethecommunicationofusers,mostoftheanonymitysystemspacktheapplicationdataintoequal-sizedcells.Viaextensiveexperime

2、ntsonTor,wefoundthatthesizeofIPpacketsintheTornetworkcanbeverydynamicbecauseacellisanapplicationconceptandtheIPlayermayrepackcells.Basedonthisfinding,weinvestigateanewcell-counting-basedattackagainstTor,whichallowstheattackertoconfirmanonymouscommunicationrelationshipamongusersveryquickly.In

3、thisattack,bymarginallyvaryingthenumberofcellsinthetargettrafficatthemaliciousexitonionrouter,theattackercanembedasecretsignalintothevariationofcellcounterofthetargettraffic.Theembeddedsignalwillbecarriedalongwiththetargettrafficandarriveatthemaliciousentryonionrouter.Then,anaccompliceofthea

4、ttackeratthemaliciousentryonionrouterwilldetecttheembeddedsignalbasedonthereceivedcellsandconfirmthecommunicationrelationshipamongusers.WehaveimplementedthisattackagainstTor,andourexperimentaldatavalidateitsfeasibilityandeffectiveness.Thereareseveraluniquefeaturesofthisattack.First,thisattac

5、kishighlyefficientandcanconfirmveryshortcommunicationsessionswithonlytensofcells.Second,thisattackiseffective,anditsdetectionrateapproaches100%withaverylowfalsepositiverate.Third,itispossibletoimplementtheattackinawaythatappearstobeverydifficultforhonestparticipantstodetect.ARCHITECTURE:EXIS

6、TINGSYSTEM:Mostexistingapproachesarebasedontrafficanalysis.Passivetrafficanalysistechniquewillrecordthetrafficpassivelyandidentifythecorrelationbetweensender’soutboundtrafficandreceiver’sinboundtrafficbasedonstatisticalmeasures.Thistypeoftechniquerequiresarelativelylongperiodoftrafficobserva

7、tionforareasonabledetectionrate.Theideaistoactivelyintroducespecialsignalsintothesender’soutboundtrafficwiththeintentionofrecognizingtheembeddedsignalatthereceiver’sinboundtraffic.Encryptiondoesnotwork,sincepacketheadersstillrevealagreatdealaboutus