* This is an incremental improvement of an already existing and known attack pattern on low-latency anonymity systems This means that the base rate fallacy will make it nearly unusable in practice, and more so as the scale of Tor traffic grows. The title of this post and article is actually incorrect the technique demonstrated has an 81.4% accuracy. The correlation they achieve in a private Tor network is impressive however, if you look at the graphs in the actual paper, you can see that the differences in correlations are actually quite small in the wild. The contribution of this paper is that if you have the malicious server and entry node, you can use a less expensive data source (Cisco NetFlow data) rather than raw packets to perform a correlation attack. It relies on a malicious server and entry node. This is an easier version of a traffic analysis attack, an attack that Tor expressly does not attempt to provide a strong defense against.
0 kommentar(er)
