arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1909.03576cs.CR
收藏

Tor隐藏服务的隐私保护寿命研究

A Privacy-Preserving Longevity Study of Tor's Hidden Services

Amirali Sanatinia, Jeman Park, Erik-Oliver Blass, Aziz Mohaisen, Guevara Noubir

摘要:

Tor和隐藏服务已经成为保护用户隐私免受跟踪和审查的实用解决方案。与此同时,人们对隐藏服务的生命周期和性质知之甚少。Tor隐藏服务的数据汇集和研究具有挑战性,因为它提供隐私的性质。研究隐藏服务的生命周期有几个好处。例如,它允许基于域名的生命周期来调查域名的恶意性。短期的隐藏服务更有可能不是合法的域,例如,与长期存在的域名相比,被勒索软件使用。在这项工作中,我们调查的隐藏服务的生命周期,通过收集数据的一个小的(2%)子集的所有Tor HSDPA IR中继在隐私保护的方式。根据收集的数据,我们设计的协议和推断技术来推断隐藏服务的生命周期。此外,由于Tor的特殊性,我们的一小部分HSDir继电器足以高精度地推断寿命,同时尊重Tor用户和服务隐私,并遵循Tor的研究安全指南。我们的研究结果表明,大部分的隐藏服务有一个非常短的生命周期。特别是,当前所有Tor隐藏服务中有50%的估计生命周期仅为10天或更短,80%的生命周期不到一个月。

英文摘要:

Tor and hidden services have emerged as a practical solution to protect user privacy against tracking and censorship. At the same time, little is known about the lifetime and nature of hidden services. Data collection and study of Tor hidden services is challenging due to its nature of providing privacy. Studying the lifetime of hidden services provides several benefits. For example, it allows investigation of the maliciousness of domains based on their lifetime. Short-lived hidden services are more likely not to be legitimate domains, e.g., used by ransomware, as compared to long-lived domains. In this work, we investigate the lifetime of hidden services by collecting data from a small (2%) subset of all Tor HSDir relays in a privacy-preserving manner. Based on the data collected, we devise protocols and extrapolation techniques to infer the lifetime of hidden services. Moreover we show that, due to Tor's specifics, our small subset of HSDir relays is sufficient to extrapolate lifetime with high accuracy, while respecting Tor user and service privacy and following Tor's research safety guidelines. Our results indicate that a large majority of the hidden services have a very short lifetime. In particular, 50% of all current Tor hidden services have an estimate lifetime of only 10 days or less, and 80% have a lifetime of less than a month.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑