评估针对 Snowflake 规避系统的实际枚举与封锁攻击
Evaluating Practical Enumeration and Blocking Attacks on the Snowflake Circumvention System
浏览论文内容
中文总结 AI 辅助
本文通过真实测量与模拟，评估了针对 Snowflake 规避系统的枚举与封锁攻击，发现代理更换限制枚举效果，但封锁顶级自治系统可影响超30%的Snowflake，并提出了已部分集成的缓解措施。
中文摘要 AI 辅助
基于代理的互联网审查规避工具（如 Snowflake）依赖大型、动态的第三方代理池来抵抗基于 IP 的封锁。我们关注支撑 Snowflake 安全性的两个假设：攻击者难以枚举代理 IP，以及封锁这些代理将造成不可接受的附带损害。在本文中，我们通过研究恶意客户端针对 Snowflake 进行的实际枚举与封锁攻击来检验这些假设。我们将有界的、符合伦理的真实世界测量与大规模模拟相结合，以评估当前的枚举与封锁风险以及更广泛的攻击者能力。在 2025 年 5 月至 6 月为期 48 天的真实世界测量中，我们的攻击枚举了超过 21,000 个唯一代理 IP 地址，这些地址属于近 1,000 个自治系统。尽管数量众多，我们发现代理的频繁更换限制了枚举随时间的整体有效性，并降低了个别代理地址被封锁对客户端的影响。然而，在网络层面，封锁观察到的自治系统中排名前 1% 的自治系统，会封锁超过 30% 的观察到的 Snowflake，同时影响 0% 的 Tranco 前 100 域名和约 2.5% 的前 100 万域名。我们发现，经纪商的负载感知匹配会在早期向攻击者暴露稳定、高容量的代理，尤其是在需求高峰期（例如 2025 年 6 月伊朗的审查事件期间），随后暴露了对系统连通性贡献不成比例的网络。在模拟中，增加攻击者规模显著提高了枚举和封锁的成功率，而更高的代理更换率则显著降低了封锁的有效性。最后，我们讨论并评估了实用的缓解措施，其中一些已集成到 Snowflake 中。
英文摘要
Proxy-based Internet censorship circumvention tools like Snowflake rely on large, dynamic pools of third-party proxies to resist IP-based blocking. We focus on two assumptions underpinning the security of Snowflake: that adversaries cannot easily enumerate proxy IPs, and that blocking those proxies would incur unacceptable collateral damage. In this paper, we test these assumptions by studying practical enumeration and blocking attacks against Snowflake conducted by malicious clients. We combine bounded, ethical real-world measurements with large-scale simulation to evaluate both present-day enumeration and blocking risk and broader attacker capabilities. Over 48 days of real-world measurements from May--June 2025, our attack enumerated over 21,000 unique proxy IP addresses belonging to almost 1,000 autonomous systems. Despite this high number, we find that proxy churn limits the overall effectiveness of enumeration over time, and reduces the impact on clients of individual proxy addresses being blocked. However, at the network level, blocking the top 1% of observed autonomous systems blocks more than 30% of observed Snowflakes while affecting 0% of Tranco Top 100 domains and ~2.5% of Top 1M domains. We discover that the broker's load-aware matching reveals stable, high-capacity proxies to attackers early, especially during periods of elevated demand such as the censorship even in Iran of June 2025, subsequently exposing the networks that contribute disproportionately to system connectivity. In simulation, increasing attacker scale sharply improves both enumeration and blocking success, while higher proxy churn significantly reduces blocking effectiveness. We conclude by discussing and evaluating practical mitigations, some of which have been integrated into Snowflake.
发表机构
- University of California, Santa Cruz（加利福尼亚大学圣克鲁兹分校）
- The Tor Project（Tor项目）
机构由 AI 辅助整理，请以论文原文为准。
