Systemization of Pluggable Transports for Censorship Resistance
Systemization of Pluggable Transports for Censorship Resistance
复制标题
DOI：
--
复制
发表时间：
2014-12
期刊：
影响因子：
--
通讯作者：
Sheharbano Khattak;Laurent Simon;S. Murdoch
中科院分区：
文献类型：
--
作者：
Sheharbano Khattak;Laurent Simon;S. Murdoch
越来越多的国家以不同的规模和出于各种原因实施互联网审查。特别是，受审查的客户端和未审查网络的入口点之间的链接是审查的常见目标，因为民族国家审查员可以轻松控制它。迄今为止，已经开发了一些审查抵抗系统来帮助规避对该链接的封锁，我们称之为链接规避系统（LC）。审查器可用的攻击向量的多样性和丰富性导致了军备竞赛，导致LC的进化速度惊人。尽管它们固有的复杂性和在这一领域的工作的广度，有没有系统的方法来评估链接规避系统，并相互比较。在本文中，我们（i）勾勒出一个攻击模型，全面探索审查的能力，（ii）提出了一个抽象的LC模型，一个系统，帮助审查的客户端通过互联网与服务器通信，同时抵制审查，（iii）描述了一个评估堆栈，强调分层的方法来评估LC，以及（iv）系统化和评估现有的提供链接规避的审查抵抗系统。我们强调了在评估和开发LC方面存在的挑战，并讨论了可能的缓解措施。
An increasing number of countries implement Internet censorship at different scales and for a variety of reasons. In particular, the link between the censored client and entry point to the uncensored network is a frequent target of censorship due to the ease with which a nation-state censor can control it. A number of censorship resistance systems have been developed thus far to help circumvent blocking on this link, which we refer to as link circumvention systems (LCs). The variety and profusion of attack vectors available to a censor has led to an arms race, leading to a dramatic speed of evolution of LCs. Despite their inherent complexity and the breadth of work in this area, there is no systematic way to evaluate link circumvention systems and compare them against each other. In this paper, we (i) sketch an attack model to comprehensively explore a censor's capabilities, (ii) present an abstract model of a LC, a system that helps a censored client communicate with a server over the Internet while resisting censorship, (iii) describe an evaluation stack that underscores a layered approach to evaluate LCs, and (iv) systemize and evaluate existing censorship resistance systems that provide link circumvention. We highlight open challenges in the evaluation and development of LCs and discuss possible mitigations.