EAGER: Collaborative: Towards Understanding the Attack Vector of Privacy Technologies

隐私增强技术的进步，包括加密机制、标准化安全协议和基础设施，显著改善了隐私，并通过保护用户对社会产生了重大影响。与此同时，这种基础设施的成功吸引了非法活动的滥用，包括复杂的僵尸网络和勒索软件，并成为毒品和违禁品的市场；僵尸网络已成为网络犯罪的主要工具，其开发者被证明是足智多谋的。有人认为，下一波僵尸网络将广泛尝试颠覆隐私基础设施和加密机制，这有可能破坏其法律基础和未来性能。该项目将为分析、监测和缓解颠覆隐私增强技术的下一代僵尸网络奠定理论和实验基础。为了实现这一目标，该项目将开发以下工具：1)分析框架：该项目制定了一个具体的策略，通过对此类僵尸网络进行推理的分析框架具体化，来接近对隐私基础设施滥用的检测、表征和缓解。这包括标识&amp；#8232；并形式化其关键属性（例如，追溯和断层扫描弹性，隐形货币化），启用机制（例如，IP地址解耦，控制/数据流量不可区分性），基本限制和评估指标。该项目将探索未来互联网架构中类似的滥用场景，在这些架构中，匿名性通过设计来促进。2)监测和分析：该项目开发了一个实验性框架，用于跟踪下一代僵尸网络的活动，以实现可扩展和有效的缓解。该框架将利用其理想的设计和行为特性，并在相关环境中借鉴各种初步测量结果。3)缓解：该项目具有最终的&amp；#8232；目标：在坚实的理论基础上，积极发展一系列缓解技术，在理论框架内进行分析，并在实验框架内进行评估。缓解技术涵盖了从增加运营此类僵尸网络的成本到主动遏制僵尸网络的各个方面。中和机器人，提出修改隐私增强协议的建议。该项目的结果将与相关社区进行沟通，以对现有和未来的隐私基础设施产生直接和直接的影响。该项目还将编写教育材料，培训学生了解增强隐私技术的基础和系统。

Advances in privacy-enhancing technologies, including cryptographic mechanisms, standardized security protocols, and infrastructure, significantly improved privacy and had a significant impact on society by protecting users. At the same time, the success of such infrastructure has attracted abuse from illegal activities, including sophisticated botnets and ransomware, and has become a marketplace for drugs and contraband; botnets rose to be a major tool for cybercrime and their developers proved to be highly resourceful. It is contended that the next waves of botnets will extensively attempt to subvert privacy infrastructure and cryptographic mechanisms, which has the potential of both undermining their legal basis and future performance. This project will develop the theoretical and experimental foundations for analyzing, monitoring and mitigating the next generation of botnets that subvert privacy-enhancing technologies. Towards that goal, the project will develop tools for: 1) Analytical framework: the project develops a concrete strategy for approaching the detection, characterization, and mitigation of abuse of privacy infrastructure by crystallizing an analytical framework for reasoning about such botnets. This includes the identification
and formalization of their key properties (e.g., traceback and tomography resiliency, stealthy monetization), enabling mechanisms (e.g., IP address de-coupling, control/data traffic indistinguishability), fundamental limitations, and evaluation metrics. The project will explore analogous scenarios of abuse in future Internet architectures where anonymity is facilitated by design. 2) Monitoring and analysis: the project develops an experimental framework to track activities of the next generation of botnets for scalable and effective mitigation. Such framework will exploit their ideal design and behavioral properties, and draws on various preliminary measurement results in related contexts. 3) Mitigation: The project has the ultimate
goal of proactively developing an arsenal of mitigation techniques grounded in a sound theoretical foundation, analyzed within the theoretical framework, and evaluated within the experimental framework. The mitigation techniques span the gamut of increasing the cost of operating such botnets, to actively containing
and neutralizing bots, to proposing modifications to the privacy-enhancing protocols. The results of this project will be communicated with the concerned communities for having a direct and immediate impact on existing and future privacy infrastructure. The project will also develop educational material to train students in the foundations and systems for enabling privacy enhancing technologies.