Tor de-anonymisation techniques

Juha Nurmi; Mikko S. Niemelä

doi:10.1007/978-3-319-64701-2_52

Tor de-anonymisation techniques

Juha Nurmi, Mikko S. Niemelä

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Scientific › peer-review

5 Citations (Scopus)

Abstract

Tor offers a censorship-resistant and distributed platform that can provide easy-to-implement anonymity to web users, websites, and other web services. Tor enables web servers to hide their location, and Tor users can connect to these authenticated hidden services while the server and the user both stay anonymous. However, throughout the years of Tor’s existence, some users have lost their anonymity. This paper discusses the technical limitations of anonymity and the operational security challenges that Tor users will encounter. We present a hands-on demonstration of anonymity exposures that leverage traffic correlation attacks, electronic fingerprinting, operational security failures, and remote code execution. Based on published research and our experience with these methods, we will discuss what they are and how some of them can be exploited. Also, open problems, solutions, and future plans are discussed.

Original language	English
Title of host publication	Network and System Security
Subtitle of host publication	11th International Conference, NSS 2017, Helsinki, Finland, August 21–23, 2017, Proceedings
Publisher	Springer
Pages	657-671
Number of pages	15
ISBN (Electronic)	978-3-319-64701-2
ISBN (Print)	978-3-319-64700-5
DOIs	https://doi.org/10.1007/978-3-319-64701-2_52
Publication status	Published - 2017
Publication type	A4 Article in conference proceedings
Event	International Conference on Network and System Security - Duration: 1 Jan 2000 → …

Publication series

Name	Lecture Notes in Computer Science
Volume	10394
ISSN (Print)	0302-9743

Conference

Conference	International Conference on Network and System Security
Period	1/01/00 → …

Publication forum classification

Publication forum level 1

ASJC Scopus subject areas

Theoretical Computer Science
General Computer Science

Access to Document

10.1007/978-3-319-64701-2_52

Cite this

@inproceedings{7c803a25d7a14ba8b4c74f04e76b30c8,

title = "Tor de-anonymisation techniques",

abstract = "Tor offers a censorship-resistant and distributed platform that can provide easy-to-implement anonymity to web users, websites, and other web services. Tor enables web servers to hide their location, and Tor users can connect to these authenticated hidden services while the server and the user both stay anonymous. However, throughout the years of Tor{\textquoteright}s existence, some users have lost their anonymity. This paper discusses the technical limitations of anonymity and the operational security challenges that Tor users will encounter. We present a hands-on demonstration of anonymity exposures that leverage traffic correlation attacks, electronic fingerprinting, operational security failures, and remote code execution. Based on published research and our experience with these methods, we will discuss what they are and how some of them can be exploited. Also, open problems, solutions, and future plans are discussed.",

author = "Juha Nurmi and Niemel{\"a}, {Mikko S.}",

note = "jufoid=62555; International Conference on Network and System Security ; Conference date: 01-01-2000",

year = "2017",

doi = "10.1007/978-3-319-64701-2_52",

language = "English",

isbn = "978-3-319-64700-5",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "657--671",

booktitle = "Network and System Security",

}

Nurmi, J & Niemelä, MS 2017, Tor de-anonymisation techniques. in Network and System Security: 11th International Conference, NSS 2017, Helsinki, Finland, August 21–23, 2017, Proceedings. Lecture Notes in Computer Science, vol. 10394, Springer, pp. 657-671, International Conference on Network and System Security, 1/01/00. https://doi.org/10.1007/978-3-319-64701-2_52

Tor de-anonymisation techniques. / Nurmi, Juha; Niemelä, Mikko S.
Network and System Security: 11th International Conference, NSS 2017, Helsinki, Finland, August 21–23, 2017, Proceedings. Springer, 2017. p. 657-671 (Lecture Notes in Computer Science; Vol. 10394).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Scientific › peer-review

TY - GEN

T1 - Tor de-anonymisation techniques

AU - Nurmi, Juha

AU - Niemelä, Mikko S.

N1 - jufoid=62555

PY - 2017

Y1 - 2017

N2 - Tor offers a censorship-resistant and distributed platform that can provide easy-to-implement anonymity to web users, websites, and other web services. Tor enables web servers to hide their location, and Tor users can connect to these authenticated hidden services while the server and the user both stay anonymous. However, throughout the years of Tor’s existence, some users have lost their anonymity. This paper discusses the technical limitations of anonymity and the operational security challenges that Tor users will encounter. We present a hands-on demonstration of anonymity exposures that leverage traffic correlation attacks, electronic fingerprinting, operational security failures, and remote code execution. Based on published research and our experience with these methods, we will discuss what they are and how some of them can be exploited. Also, open problems, solutions, and future plans are discussed.

AB - Tor offers a censorship-resistant and distributed platform that can provide easy-to-implement anonymity to web users, websites, and other web services. Tor enables web servers to hide their location, and Tor users can connect to these authenticated hidden services while the server and the user both stay anonymous. However, throughout the years of Tor’s existence, some users have lost their anonymity. This paper discusses the technical limitations of anonymity and the operational security challenges that Tor users will encounter. We present a hands-on demonstration of anonymity exposures that leverage traffic correlation attacks, electronic fingerprinting, operational security failures, and remote code execution. Based on published research and our experience with these methods, we will discuss what they are and how some of them can be exploited. Also, open problems, solutions, and future plans are discussed.

U2 - 10.1007/978-3-319-64701-2_52

DO - 10.1007/978-3-319-64701-2_52

M3 - Conference contribution

AN - SCOPUS:85028453023

SN - 978-3-319-64700-5

T3 - Lecture Notes in Computer Science

SP - 657

EP - 671

BT - Network and System Security

PB - Springer

T2 - International Conference on Network and System Security

Y2 - 1 January 2000

ER -

Tor de-anonymisation techniques

Abstract

Publication series

Conference

Publication forum classification

ASJC Scopus subject areas

Access to Document

Fingerprint

Cite this