基于 RPKI 的位置无关 Tor 守卫中继选择算法
RPKI-Based Location-Unaware Tor Guard Relay Selection Algorithms
AI总结：
针对位置感知 Tor 守卫选择易泄露位置并遭受放置攻击的问题，本文利用 RPKI 提出基于 ROA 的轻量 Discount Selection 和融合 ROA、ROV 的 Matching Selection，以低开销提升路由攻击防御能力。
摘要：
Tor 是一款知名的匿名通信工具，被具有各种隐私和安全需求的人们使用。以往工作利用路由攻击来观察 Tor 流量并去匿名化 Tor 用户。随后，研究者提出了位置感知的中继选择算法，以防御针对 Tor 的此类攻击。然而，众所周知，位置感知的中继选择算法容易泄露客户端位置信息，并且易受守卫放置攻击。我们能否设计一种新的位置无关中继选择方法，同时实现防御路由攻击的相似目标？为此，我们利用资源公钥基础设施（RPKI）来设计新的守卫中继选择算法。我们仅结合路由源授权（ROA）信息，开发了轻量级的 Discount Selection 算法；并结合 ROA 与路由源验证（ROV）信息，开发了更安全的 Matching Selection 算法。评估结果表明，使用我们的 Matching Selection 算法，ROA-ROV 匹配的客户端-中继对数量有所增加；通过定制的 Shadow 仿真和基准测试，该比例达到 48.47%，且性能开销极小。
英文摘要：
Tor is a well-known anonymous communication tool, used by people with various privacy and security needs. Prior works have exploited routing attacks to observe Tor traffic and deanonymize Tor users. Subsequently, location-aware relay selection algorithms have been proposed to defend against such attacks on Tor. However, location-aware relay selection algorithms are known to be vulnerable to information leakage on client locations and guard placement attacks. Can we design a new location-unaware approach to relay selection while achieving the similar goal of defending against routing attacks? Towards this end, we leverage the Resource Public Key Infrastructure (RPKI) in designing new guard relay selection algorithms. We develop a lightweight Discount Selection algorithm by only incorporating Route Origin Authorization (ROA) information, and a more secure Matching Selection algorithm by incorporating both ROA and Route Origin Validation (ROV) information. Our evaluation results show an increase in the number of ROA-ROV matched client-relay pairs using our Matching Selection algorithm, reaching 48.47% with minimal performance overhead through custom Shadow simulations and benchmarking.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
