@inproceedings{8a53643d4c1947baa9009f1863fa5ea2,
title = "In search of an anonymous and secure lookup attacks on structured peer-to-peer anonymous communication systems",
abstract = "The ability to locate random relays is a key challenge for peer-to-peer (P2P) anonymous communication systems. Earlier attempts like Salsa and AP3 used distributed hash table lookups to locate relays, but the lack of anonymity in their lookup mechanisms enables an adversary to infer the path structure and compromise user anonymity. NISAN and Torsk are state-of-the-art systems for P2P anonymous communication. Their designs include mechanisms that are specifically tailored to mitigate information leak attacks. NISAN proposes to add anonymity into the lookup mechanism itself, while Torsk proposes the use of secret buddy nodes to anonymize the lookup initiator. In this paper, we attack the key mechanisms that hide the relationship between a lookup initiator and its selected relays in NISAN and Torsk. We present passive attacks on the NISAN lookup and show that it is not as anonymous as previously thought. We analyze three circuit construction mechanisms for anonymous communication using the NISAN lookup, and show that the information leaks in the NISAN lookup lead to a significant reduction in user anonymity. We also propose active attacks on Torsk that defeat its secret buddy mechanism and consequently compromise user anonymity. Our results are backed up by probabilistic modeling and extensive simulations. Our study motivates the search for a DHT lookup mechanism that is both secure and anonymous.",
keywords = "Anonymity, Attacks, Information leaks, Peer-to-peer",
author = "Qiyan Wang and Prateek Mittal and Nikita Borisov",
year = "2010",
doi = "10.1145/1866307.1866343",
language = "English (US)",
isbn = "9781450302449",
series = "Proceedings of the ACM Conference on Computer and Communications Security",
pages = "308--318",
booktitle = "CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security",
note = "17th ACM Conference on Computer and Communications Security, CCS'10 ; Conference date: 04-10-2010 Through 08-10-2010",
}