@inproceedings{50a8003bb1f146cd966a7a4863fee1d3,
title = "Anonymity on QuickSand: Using BGP to compromise tor",
abstract = "Anonymity systems like Tor are known to be vulnerable to malicious relay nodes. Another serious threat comes from the Autonomous Systems (ASes) that carry Tor traffic due to their powerful eavesdropping capabilities. Indeed, an AS (or set of colluding ASes) that lies between the client and the first relay, and between the last relay and the destination, can perform timing analysis to compromise user anonymity. In this paper, we show that AS-level adversaries are much more powerful than previously thought. First, routine BGP routing changes can significantly increase the number of ASes that can analyze a user's traffic successfully. Second, ASes can actively manipulate BGP announcements to put themselves on the paths to and from relay nodes. Third, an AS can perform timing analysis even when it sees only one direction of the traffic at both communication ends. Actually, asymmetric routing increases the fraction of ASes able to analyze a user's traffic. We present a preliminary evaluation of our attacks using measurements of BGP and Tor. Our findings motivate the design of approaches for anonymous communication that are resilient to AS-level adversaries.",
keywords = "Anonymity system, BGP, IP hijack, MITM, Man-in-the-middle, Routing dynamic, Tor",
author = "Laurent Vanbever and Oscar Li and Rexford, {Jennifer L.} and Prateek Mittal",
year = "2014",
month = oct,
day = "27",
doi = "10.1145/2670518.2673869",
language = "English (US)",
series = "Proceedings of the 13th ACM Workshop on Hot Topics in Networks, HotNets 2014",
publisher = "Association for Computing Machinery, Inc",
booktitle = "Proceedings of the 13th ACM Workshop on Hot Topics in Networks, HotNets 2014",
note = "13th ACM SIGCOMM Workshop on Hot Topics in Networks, HotNets 2014 ; Conference date: 27-10-2014 Through 28-10-2014",
}