Moby: A Blackout-Resistant Anonymity Network for Mobile Devices
Moby: A Blackout-Resistant Anonymity Network for Mobile Devices
复制标题
DOI：
10.56553/popets-2022-0071
复制
发表时间：
2022-07
期刊：
影响因子：
--
通讯作者：
Amogh Pradeep;Hira Javaid;Richard Ryan Williams;Antoine Rault;D. Choffnes;Stevens Le Blond;B. Ford
中科院分区：
文献类型：
--
作者：
Amogh Pradeep;Hira Javaid;Richard Ryan Williams;Antoine Rault;D. Choffnes;Stevens Le Blond;B. Ford
互联网断网对匿名和抵制审查来说是一个挑战。现有流行的匿名网络（如Freenet， I2P, Tor）依靠互联网连接来运行，这使得它们在停电期间无法实现。在这种情况下，移动ad-hoc网络可以提供连接，但是之前针对ad-hoc网络的通信协议并没有考虑匿名性和攻击弹性。我们通过设计、实现和评估Moby来解决这一需求，Moby是一种针对移动设备的抗停电匿名网络。Moby提供端到端加密、转发保密和发送-接收匿名。它的特点是双峰运行设计，在可用时使用互联网连接，在停电时使用特设网络。在互联网连接期间，Moby作为常规消息传递应用程序运行，并引导信息，这些信息稍后在没有互联网连接的情况下使用，以实现安全的匿名通信。Moby结合了一个基于用户联系人列表的信任模型，以及一个减轻洪水攻击的信任建立协议。我们为一家大型移动电话提供商进行了一项基于经验的模拟研究，该研究基于一周内268,596名用户的手机踪迹，以确定Moby的可行性并展示我们的研究结果。最后，我们将Moby客户端作为Android应用程序来实现和评估。
Internet blackouts are challenging environments for anonymity and censorship resistance. Existing popular anonymity networks (e.g., Freenet, I2P, Tor) rely on Internet connectivity to function, making them impracticable during such blackouts. In such a setting, mobile ad-hoc networks can provide connectivity, but prior communication protocols for ad-hoc networks are not designed for anonymity and attack resilience. We address this need by designing, implementing, and evaluating Moby, a blackout-resistant anonymity network for mobile devices. Moby provides end-to-end encryption, forward secrecy and sender-receiver anonymity. It features a bi-modal design of operation, using Internet connectivity when available and ad-hoc networks during blackouts. During periods of Internet connectivity, Moby functions as a regular messaging application and bootstraps information that is later used in the absence of Internet connectivity to achieve secure anonymous communications. Moby incorporates a model of trust based on users’ contact lists, and a trust establishment protocol that mitigates flooding attacks. We perform an empirically informed simulation-based study based on cellphone traces of 268,596 users over the span of a week for a large cellular provider to determine Moby’s feasibility and present our findings. Last, we implement and evaluate the Moby client as an Android app.