arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1802.08415cs.CR
收藏

TARANET:网络层的抗解析性

TARANET: Traffic-Analysis Resistant Anonymity at the NETwork layer

Chen Chen, Daniele E. Asoni, Adrian Perrig, David Barrera, George Danezis, Carmela Troncoso

摘要:

现代的低延迟匿名系统,无论是作为一个覆盖或实现在网络层,提供有限的安全保证,对流量分析。另一方面,高延迟匿名系统提供了强大的安全保证,在成本的计算开销和长延迟,这是过度的交互式应用程序。我们提出了TARANET,一个匿名系统,在网络层实现对流量分析的保护,并限制了所产生的延迟和开销。在TARANET的设置阶段,流量分析因混合而受阻。在数据传输阶段,终端主机和AS协调使用分组拆分将流量整形为恒定速率传输。我们的原型实现表明,TARANET可以转发超过50 Gbps的匿名流量使用商品硬件。

英文摘要:

Modern low-latency anonymity systems, no matter whether constructed as an overlay or implemented at the network layer, offer limited security guarantees against traffic analysis. On the other hand, high-latency anonymity systems offer strong security guarantees at the cost of computational overhead and long delays, which are excessive for interactive applications. We propose TARANET, an anonymity system that implements protection against traffic analysis at the network layer, and limits the incurred latency and overhead. In TARANET's setup phase, traffic analysis is thwarted by mixing. In the data transmission phase, end hosts and ASes coordinate to shape traffic into constant-rate transmission using packet splitting. Our prototype implementation shows that TARANET can forward anonymous traffic at over 50~Gbps using commodity hardware.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑