TWC: Small: Collaborative: Advancing Anonymity Against an AS-level Adversary

TWC：小型：协作：针对 AS 级对手推进匿名性

• 批准号: 1423139
• 负责人: Prateek Mittal
• 金额: $ 25万
• 依托单位: Princeton University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-09-01 至 2017-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1423139&HistoricalAwards=false
• 关键词: TWC; Small; Collaborative; Advancing; Anonymity

Autonomous systems (AS) are key building blocks of the Internet's routing infrastructure. Surveillance of AS may allow large-scale monitoring of Internet users. Those who aim to protect the privacy of their online communications may turn to anonymity systems like Tor, but Tor is not designed to protect against such AS-level adversaries. AS-level adversaries present unique challenges for the design of robust anonymity systems and present a very different threat model from the ones used to design and study systems like Tor. Thus, new research is needed to understand this threat and to defend against it. This project is investigating the design of anonymity systems that are resilient against AS-level adversaries. First, the project aims to quantify the capabilities of AS-level adversaries, who are powerful eavesdroppers and also capable of active attacks, but also have some limitations in practice. Second, the project is designing new route-selection strategies for anonymity systems that can limit how much of the anonymized traffic the AS-level adversary can observe and attack. Finally, the project is investigating how anonymity systems can hinder an AS-level adversaries' ability to analyze encrypted traffic by injecting spurious cover traffic and timing delays. The findings and new anonymity system designs from this research will impact the privacy of a broad class of users in the context of forms of large-scale monitoring of online communications.

自治系统（AS）是互联网路由基础设施的关键组成部分。对AS的监视可能允许对互联网用户进行大规模监视。那些旨在保护其在线通信隐私的人可能会转向像Tor这样的匿名系统，但Tor的设计并不是为了防止这种as级别的对手。as级攻击者对健壮匿名系统的设计提出了独特的挑战，并且呈现了与用于设计和研究Tor等系统的威胁模型非常不同的威胁模型。因此，需要新的研究来了解这种威胁并加以防范。该项目正在研究匿名系统的设计，以抵御as级对手的攻击。首先，该项目旨在量化as级对手的能力，这些对手是强大的窃听者，也有能力进行主动攻击，但在实践中也有一些限制。其次，该项目正在为匿名系统设计新的路由选择策略，以限制as级对手可以观察和攻击的匿名流量的数量。最后，该项目正在研究匿名系统如何通过注入虚假覆盖流量和定时延迟来阻碍as级对手分析加密流量的能力。这项研究的发现和新的匿名系统设计将在大规模在线通信监控的背景下影响广大用户的隐私。