Tor中继拒绝的社会技术层面
Sociotechnical Aspects of Tor Relay Rejection
- University of Namur（南纳慕尔大学）
机构由 AI 辅助整理，请以论文原文为准。
AI总结：
本研究通过用户调研与网络模拟，分析Tor中继拒绝政策的社会技术影响，发现其对手优势微弱，但网络更替显著影响匿名性，并提出安全指标与实施建议。
AI中文摘要：
2019年，Tor项目对Tor版本实施了生命周期终止（EoL）政策，导致过时中继被拒绝，这些中继占共识权重的显著比例。虽然该政策有助于网络维护、减少反向移植工作并缩短漏洞暴露时间，但其社会技术影响尚未得到研究。一项用户研究（N=26）显示，中继运营商虽然并非普遍知晓EoL政策，但总体上对其持正面看法。运营实践各不相同，有时会将新安装的中继排除在网络之外。基于历史数据的网络模拟评估了该政策对Tor客户端面对常见对手时的即时影响。结果表明，对手优势微乎其微，而网络更替（即中继的进入和退出）对用户匿名性的影响更为显著。引入了安全指标来评估中继在两种对手模型下的贡献，从而能够按个体效用和安全性进行排名。对四轮排除的分析显示，少数被拒绝的中继通常占所有被排除中继所提供安全性的50%以上。提出了EoL政策实施建议，以减轻潜在弊端。
英文摘要：
In 2019, the Tor Project enforced an end-of-life (EoL) policy for Tor versions, leading to the rejection of outdated relays, amounting to a notable fraction of consensus weight. While this policy aids network maintenance, reduces backporting efforts, and shortens vulnerability exposure, its sociotechnical implications remain unstudied. A user study ($N=26$) reveals that relay operators, though not universally aware of the EoL policy, generally view it favorably. Operational practices vary, occasionally excluding newly installed relays from the network. Network simulations, grounded in historical data, assess the policy's immediate impact on Tor clients against common adversaries. Results indicate a marginal adversarial advantage, with network churn (i.e., relays entering and exiting) exerting a more pronounced effect on user anonymity. Security metrics are introduced to evaluate relay contributions against two adversary models, enabling ranking by individual utility and security. Analysis of four exclusion rounds shows that a minority of rejected relays typically account for over 50% of the security provided by all excluded relays. Recommendations for EoL policy implementation are proposed to mitigate potential drawbacks.
