TTP: Small: Collaborative: Defending Against Website Fingerprinting in Tor

TTP：小：协作：防御 Tor 中的网站指纹识别

• 批准号: 1619454
• 负责人: Roger Dingledine
• 金额: $ 35万
• 依托单位: The Tor Project
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-09-01 至 2019-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1619454&HistoricalAwards=false
• 关键词: TTP; Small; Collaborative; Defending; Against

The more people use the Internet, the more they risk sharing information they don't want other people to know. Tor is a technology that every day helps millions of people protect their privacy online. Tor users -- ranging from ordinary citizens to companies with valuable intellectual property -- gain protection for the content of their online messages and activities, as well as whom they interact with and when. For the most part, Tor is very secure. However, it has a known vulnerability to an attack called website fingerprinting. An attacker, such as someone eavesdropping on a wireless connection, can analyze recognizable patterns in data that websites send to visitors, potentially determining which websites a user visits. Studies have shown that, in some situations, this attack can be successful up to 90% of the time. Developers of Tor and a team of researchers will collaborate to build and deploy new defenses against website fingerprinting, which substantially lower attack accuracy without degrading user experience or increasing the costs of running the system. By widely deploying such a defense, Tor's security is greatly improved. This also provides an experimental platform and data that other researchers can use for their own experiments, helping to further strengthen Tor.Previous approaches to defending against website fingerprinting increased latency, so that web pages load 2 to 4 times slower than normal. To design an effective defense that doesn't unacceptably slow browsing or increase bandwidth overhead, this project builds on a technique called Adaptive Padding, which has shown promising results in preliminary work. Adaptive Padding works by noticing distinctive gaps in data packets flowing over the network between a website and Tor user and filling these gaps with extra packets to obfuscate the website's fingerprint. The research team first developed a platform for evaluating Adaptive Padding and other defenses in Tor, allowing security experiments in the live Tor network without full deployment or endangering user privacy. Leveraging this platform, the team performs extensive experiments on website fingerprinting defenses and attacks, leading towards deployment. The project focuses on defenses that can be practically deployed and significantly improve user security. Since defenses meeting these requirements have been understudied to date, this project enhances knowledge in this area. Finally, the findings of the project are fully transitioned to Tor to make Internet browsing safer and more secure.

使用互联网的人越多，他们分享不想让其他人知道的信息的风险就越大。Tor是一项每天帮助数百万人在线保护隐私的技术。TOR用户--从普通公民到拥有宝贵知识产权的公司--获得了对其在线消息和活动的内容以及他们与谁互动和何时互动的保护。在大多数情况下，Tor是非常安全的。然而，它在一种名为网站指纹的攻击中存在一个已知的漏洞。攻击者，如窃听无线连接的人，可以分析网站发送给访问者的数据中的可识别模式，从而潜在地确定用户访问哪些网站。研究表明，在某些情况下，这种攻击的成功率高达90%。Tor的开发者和一组研究人员将合作建立和部署针对网站指纹识别的新防御系统，这种防御系统在不降低用户体验或增加系统运行成本的情况下，显著降低攻击准确性。通过广泛部署这样的防御，Tor的安全性得到了极大的提高。这也提供了一个实验平台和数据，供其他研究人员用于自己的实验，有助于进一步加强Tor.以前防御网站指纹的方法会增加延迟，使网页加载速度比正常情况下慢2到4倍。为了设计一种有效的防御措施，既不会让人无法接受地减慢浏览速度，也不会增加带宽开销，该项目建立在一种名为自适应填充的技术之上，该技术在初步工作中显示了良好的结果。自适应填充的工作原理是注意到网站和Tor用户之间在网络上流动的数据包中的明显缺口，并用额外的数据包来填充这些缺口，以混淆网站的指纹。研究团队首先开发了一个平台，用于评估自适应填充和Tor中的其他防御措施，允许在不完全部署或危及用户隐私的情况下在实时Tor网络中进行安全实验。利用这一平台，该团队对网站指纹防御和攻击进行了广泛的实验，从而实现了部署。该项目的重点是可实际部署并显著提高用户安全性的防御系统。由于到目前为止，满足这些要求的防御系统研究不足，该项目增强了这一领域的知识。最后，该项目的发现被完全过渡到Tor，使互联网浏览更加安全可靠。