UCL logo

UCL Discovery

UCL home » Library Services » Electronic resources » UCL Discovery

Guard Sets for Onion Routing

Danezis, G; Hayes, J; (2015) Guard Sets for Onion Routing. Guard Sets for Onion Routing , 2015 (2) pp. 65-80. 10.1515/popets-2015-0017. Green open access

[img] Text
popets15-guardsets(3).pdf
Available under License : See the attached licence file.

Download (1MB)

Abstract

“Entry” guards protect the Tor onion routing system from variants of the “predecessor” attack, that would allow an adversary with control of a fraction of routers to eventually de-anonymize some users. Research has however shown the three guard scheme has drawbacks and Dingledine et al. proposed in 2014 for each user to have a single long-term guard. We first show that such a guard selection strategy would be optimal if the Tor network was failure-free and static. However under realistic failure conditions the one guard proposal still suffers from the classic fingerprinting attacks, uniquely identifying users. Furthermore, under dynamic network conditions using single guards offer smaller anonymity sets to users of fresh guards. We propose and analyze an alternative guard selection scheme by way of grouping guards together to form shared guard sets. We compare the security and performance of guard sets with the three guard scheme and the one guard proposal. We show guard sets do provide increased resistance to a number of attacks, while foreseeing no significant degradation in performance or bandwidth utilization.

Type: Article
Title: Guard Sets for Onion Routing
Open access status: An open access version is available from UCL Discovery
DOI: 10.1515/popets-2015-0017
Publisher version: http://dx.doi.org/10.1515/popets-2015-0017
Language: English
Additional information: © Jamie Hayes et al.. This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License. http://creativecommons.org/licenses/by-nc-nd/3.0/
URI: http://discovery.ucl.ac.uk/id/eprint/1469540
Downloads since deposit
67Downloads
Download activity - last month
Download activity - last 12 months
Downloads by country - last 12 months

Archive Staff Only

View Item View Item