Abaphenyi benza ukuhlaselwa kwe-Dos ku-Tor Network ukunciphisa ukusebenza kwayo

Iqembu labacwaningi abavela eGeorgetown University kanye ne-US Navy Research Laboratory. Bahlaziye ukumelana kwenethiwekhi engaziwa iTor ekunqatsheni ukuhlaselwa kwensizakalo (DoS).

Uphenyo endaweni yokubandakanyeka kwenethiwekhi yeTor igxile kakhulu ekuvinjelweni (ukuvimba ukufinyelela kuTor), kunqunywa izicelo ngeTor kuthrafikhi yokuhamba kanye ukuhlaziya ukuhlangana kokugeleza kwethrafikhi ngaphambi nangemva kwendawo yokuphuma yeTor ukuze ungasebenzisi abasebenzisi igama.

Mayelana nesifundo

Ucwaningo lwethulwe kukhombisa ukuthi inhlangano yokuhlaselwa kwe-DoS eTor ayinakwa futhi kubiza izinkulungwane eziningana zamaRandi ngenyanga, kungenzeka ukudala izimo zokuphazanyiswa kukaTor, okungaphoqa abasebenzisi ukuthi bayeke ukusebenzisa iTor ngenxa yokusebenza kabi.

Abaphenyi baphakamisa izimo ezintathu zokwenza ukuhlaselwa kwe-DoS: chlela kabusha isiminyaminya phakathi kwezindawo zebhuloho, ungalingani umthwalo, futhi udale isiminyaminya phakathi kokudluliswa, okudinga ukuthi umhlaseli abe nomkhawulokudonsa wama-30, 5 no-3 Gbit / s.

Ngokwezimali, izindleko zokwenza ukuhlasela phakathi nenyanga zizoba ngamadola ayizinkulungwane eziyi-17, 2.8 no-1.6 ngokulandelana. Ukuqhathanisa, ukwenza ukuhlaselwa kwebunzi le-DDoS ukuphazamisa iTor kuzodinga umkhawulokudonsa we-512.73 Gbit / s futhi kubize u- $ 7.2 million ngenyanga.

Abaphenyi bagcizelela ukuthi:

Ukuqala ukwenqatshwa kwensizakalo kusebenza kakhulu kakhulu kunokuhlela ukuhlaselwa kwe-DoS usebenzisa indlela yeSybil ngenani elifanayo.

Indlela yeSybil ifaka ukubeka inani elikhulu lokudluliselwa komdabu kunethiwekhi yeTor, lapho ungabeka khona amaketanga noma unciphise ukusebenza.

Ngesabelomali sokuhlaselwa kwama-30, 5 no-3 Gbit / s, indlela yeSybil inganciphisa ukusebenza ngo-32%, 7.2% no-4.5% wezindawo zokuphuma, ngokulandelana. Ngenkathi ukuhlaselwa kwe-DoS kuhlongozwe ocwaningweni kuhlanganisa wonke ama-node.

Uma siqhathanisa izindleko nezinye izinhlobo zokuhlaselwa, ukwenza ukuhlasela ukuze ungachazi abasebenzisi ngesabelomali sama-30 Gbit / s kuzosivumela ukuthi sifinyelele ekulawuleni ama-21% wezindawo ezingenayo nama-5.3% aphumayo futhi sifinyelele ukufakwa kuwo wonke ama-node.

Ukuhlasela kokuqala

Indlela yokuqala, ngemali engu- $ 17 ngenyanga, ngesikhukhula seqoqo lama-node elinganiselwe kwebhuloho ngamandla we-30 Gbit / s izonciphisa isivinini sokulanda idatha ngamakhasimende ngo-44%.

Ngesikhathi sokuhlolwa, ama-obfs12 bridge node kuphela kuma-4 asele esebenza (awafakiwe kuhlu lwemikhombandlela yomphakathi futhi asetshenziselwa ukuvimbela ukuvinjelwa kwe-watchdog node), okuvumela ukuthi ubonise ngokukhetha ama-node ebhuloho abasala kukazamcolo.

Abathuthukisi be-Tor bangaphindaphinda kabili izindleko zokulungisa futhi babuyisele umsebenzi kuma-node alahlekile, kepha umhlaseli uzodinga kuphela ukukhuphula izindleko zawo abe ngama- $ 31 ngenyanga ukuze ahlasele wonke amabhuloho angama-38.

Ukuhlasela kwesibili

Indlela yesibili, okuyi kudinga ama-5 Gbit / s ukuhlasela, kuncike ekunqamukeni kwesistimu eyodwa Uhlelo lokulinganisa kwe-bandwidth TorFlow futhi linciphisa ijubane elijwayelekile lokulayishwa kwedatha ngamakhasimende nge-80%.

I-TorFlow isetshenziselwa ukulinganisa umthwalo, ivumela ukuhlaselwa kuphazamise ukusatshalaliswa kwethrafikhi futhi ihlele ukudlula kwayo ngenani elilinganiselwe lamaseva, kubangele ukuthi balayishwe ngokweqile.

Ukuhlasela kwesithathu

Indlela yesithathu, okwanele i-3 Gbit / s eyanele, kuncike ekusebenziseni iklayenti le-Tor eliguquliwe ukudala ukulayishwa okukhohlisayo, okunciphisa ijubane lokulayishwa kwamakhasimende ngama-47% ngezindleko zamaRandi ayizinkulungwane eziyi-1,6 ngenyanga.

Ngokwanda kwezindleko zokuhlasela kuye ku- $ 6.3k, ungafinyelela ukwehliswa kwesivinini sokulanda iklayenti ngo-120%.

Iklayenti eliguquliwe, esikhundleni sokwakhiwa okuvamile kochungechunge lwama-node amathathu (okokufaka, okuphakathi nokukhipha izindawo), kusebenzisa uchungechunge lwama-8 node avunyelwe yi-protocol enenombolo enkulu yamathemba phakathi kwezindawo, ngemuva kwalokho icela ukulandwa kwamafayela amakhulu futhi iyeke ukusebenza kokufunda ngemuva kokuhambisa izicelo, kepha iyaqhubeka nokuthumela ukulawula.