Geneva: Evolving Censorship Evasion Strategies
Geneva: Evolving Censorship Evasion Strategies
复制标题
DOI：
10.1145/3319535.3363189
复制
发表时间：
2019-11
期刊：
影响因子：
--
通讯作者：
Kevin Bock;George Hughey;Xiao Qiang;Dave Levin
中科院分区：
文献类型：
--
作者：
Kevin Bock;George Hughey;Xiao Qiang;Dave Levin
研究人员和审查制度长期以来一直在玩猫捉老鼠的游戏，导致越来越复杂的互联网规模的审查技术和方法来逃避它们。在本文中，我们通过开发自动发现审查规避策略的技术，彻底改变了以前的手动规避-检测周期。我们提出了Geneva，一种新的遗传算法，它进化了基于数据包操纵的审查逃避策略，以对抗国家一级的审查者。Geneva根据四种基本的数据包操作原语（丢弃、篡改头、复制和片段）组成、改变和发展复杂的策略。通过在实验室和针对几个真实的审查器（在中国、印度和哈萨克斯坦）进行的实验，我们证明了Geneva能够快速独立地从先前的工作中重新推导出大多数策略，并推导出新的亚种和全新的包操作策略。此外，日内瓦发现成功的策略，以前的工作假设是无效的，并演变为新的工作变体灭绝的策略。我们分析了日内瓦创造的新策略，以推断审查者以前未知的行为。日内瓦会议是迈向规避审查自动化的第一步；为此，我们公开了我们的代码和数据。
Researchers and censoring regimes have long engaged in a cat-and-mouse game, leading to increasingly sophisticated Internet-scale censorship techniques and methods to evade them. In this paper, we take a drastic departure from the previously manual evade-detect cycle by developing techniques to automate the discovery of censorship evasion strategies. We present Geneva, a novel genetic algorithm that evolves packet-manipulation-based censorship evasion strategies against nation-state level censors. Geneva composes, mutates, and evolves sophisticated strategies out of four basic packet manipulation primitives (drop, tamper headers, duplicate, and fragment). With experiments performed both in-lab and against several real censors (in China, India, and Kazakhstan), we demonstrate that Geneva is able to quickly and independently re-derive most strategies from prior work, and derive novel subspecies and altogether new species of packet manipulation strategies. Moreover, Geneva discovers successful strategies that prior work posited were not effective, and evolves extinct strategies into newly working variants. We analyze the novel strategies Geneva creates to infer previously unknown behavior in censors. Geneva is a first step towards automating censorship evasion; to this end, we have made our code and data publicly available.