Improved method of Tor network flow watermarks based on IPD interval

Jie DU; Yongzhong HE; Ye DU

doi:10.11959/j.issn.2096-109x.2019041

您当前的位置：

首页 >

文章列表页 >

Improved method of Tor network flow watermarks based on IPD interval

Papers | 更新时间：2024-06-03

- Improved method of Tor network flow watermarks based on IPD interval
- Chinese Journal of Network and Information Security Vol. 5, Issue 4, Pages: 91-98(2019)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2019041
  CLC： TP391.1
- Online First：2019-08，
  
  Published：15 August 2019
- 稿件说明：
移动端阅览
Jie DU, Yongzhong HE, Ye DU. Improved method of Tor network flow watermarks based on IPD interval[J]. Chinese Journal of Network and Information Security, 2019, 5(4): 91-98.
DOI：

Jie DU, Yongzhong HE, Ye DU. Improved method of Tor network flow watermarks based on IPD interval[J]. Chinese Journal of Network and Information Security, 2019, 5(4): 91-98. DOI： 10.11959/j.issn.2096-109x.2019041.

摘要

Tor是一种为隐藏流量源提供服务的匿名网络机制，但其存在入口流量特征明显、易被识别的问题。obfs4等网桥协议为解决此问题应运而生，由此带来的新挑战尚未攻克，因此，提出一种IPD质心方案，利用k-means的聚类特性将原方案进行改进，使加入的流水印在obfs4网桥3种模式上均能被高效地检测出。实验结果表明，改进后的算法有更高的检测率和识别率，且应对不同的网络环境有较强的适应能力，有利于良好安全网络环境的构建。

Abstract

Tor is an anonymous network mechanism that provides services for hiding traffic sources

but it has the problem that the entry traffic flows of Tor are clearly identifiable.Bridge protocols such as obfs4 come into being to solve this problem

which brings new challenges that have not yet been overcome.An IPD interval scheme is proposed

which uses the clustering characteristics of k-means to improve the original scheme

so that the added flow watermark can be detected efficiently in the three modes of obfs4 bridges.The results of experiments show that the improved algorithm has higher detection rate and recognition rate

and has good adaptability to variable netflow traffic

which is conducive to the construction of a nice secure network environment.

关键词

Keywords

references

WANG X , REEVES D . Robust correlation of encrypted attack traffic through stepping stones by flow watermarking [J ] . IEEE Transactions on Dependable and Secure Computing , 2011 , 8 ( 3 ): 434 - 449 .

SNOEREN A , PATRIDGE C , et al . Hash-based IP traceback [C ] // Proceedings of ACM SIGCOMM , 2001 : 3 - 14 .

GOODRICH M T , . Efficient packet marking for large-scale iptraceback [C ] // Proceedings of the 9th ACM Conference on Computer and Communications Security (CCS 2002) . 2002 : 117 - 126 .

吕博 , 廖勇 , 谢海永 . Tor 匿名网络攻击技术综述 [J ] . 中国电子科学研究院学报 , 2017 ( 1 ): 14 - 15 .

LV B , LIAO Y , XIE H Y . Survey on attack technologies to Tor anonymous network [J ] . Journal of CAEIT , 2017 ( 1 ): 14 - 15

何永忠 , 李响 , 陈美玲 , 等 . 基于云流量混淆的 Tor 匿名通信识别方法 [J ] . 工程科学与技术 , 2017 ( 2 ): 121 - 122 .

HE Y Z , LI X , CHEN M L , et al . Identification of Tor anonymous communication with cloud traffic obfuscation [J ] . Advanced Engineering Sciences , 2017 ( 2 ): 121 - 122 .

WANG X , CHEN S , JAJODIA S . Tracking anonymous peer-to-peer VoIP calls on the Internet [C ] // ACM Conference on Computer and Communications Security . 2005 : 81 - 91 .

HOUMANSADR A , KIYAVASH N , BORISOV N . RAINBOW:a robust and invisible non-blind watermark for network flows [C ] // Network and Distributed System Security Symposium,San Diego , 2009 .

WANG X , CHEN S , JAJODIA S . Network flow watermarking attack on low-latency anonymous communication systems [C ] // IEEE Symposium on Security and Privacy . IEEE Computer Society , 2007 : 116 - 130 .

PYUN Y J , PARK Y H , WANG X , et al . Tracing traffic through intermediate hosts that repacketize flows [C ] // IEEE International Conference on Computer Communications . 2007 : 634 - 642 .

PANCHENKO A , LANZE F , ZINNEN A , et al . Website fingerprinting at internet scale [C ] // Network and Distributed System Security Symposium . 2016 .

郭晓军 , 程光 , 朱琛刚 , 等 . 主动网络流水印技术研究进展 [J ] . 通信学报 , 2014 , 35 ( 7 ): 178 - 192 .

GUO X J , CHENG G , ZHU C G , et al . Progress in research on active network flow watermark [J ] . Journal on Communications , 2014 , 35 ( 7 ): 178 - 192 .

LEI C , ZHANG H , LIU Y , et al . Net-flow fingerprint model based on optimization theory [J ] . Arabian Journal for Science ＆ Engineering , 2016 , 41 ( 8 ): 3081 - 3088 .

KIYAVASH N , HOUMANSADR A , BORISOV N . Multi-flow attacks against network flow watermarking schemes [C ] // Conference on Security Symposium . USENIX Association , 2008 : 307 - 320 .

Views

729

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Survey of network-layer anonymous communication protocols

Comparative study of anonymous network Tor and I2P

Related Author

Liangmin WANG

Xiaoling NI

Hui ZHAO

Yun YANG

Lingyan LI

Qingzheng WEI

Related Institution

No data

⁰