Distinguishing Tor From Other Encrypted Network Traffic Through Character Analysis

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Choorod, Pitpimon, Bauer, Tobias J., Aßmuth, Andreas
Format: Preprint
Veröffentlicht: 2024
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866917667052453888
author Choorod, Pitpimon
Bauer, Tobias J.
Aßmuth, Andreas
author_facet Choorod, Pitpimon
Bauer, Tobias J.
Aßmuth, Andreas
contents For journalists reporting from a totalitarian regime, whistleblowers and resistance fighters, the anonymous use of cloud services on the Internet can be vital for survival. The Tor network provides a free and widely used anonymization service for everyone. However, there are different approaches to distinguishing Tor from non-Tor encrypted network traffic, most recently only due to the (relative) frequencies of hex digits in a single encrypted payload packet. While conventional data traffic is usually encrypted once, but at least three times in the case of Tor due to the structure and principle of the Tor network, we have examined to what extent the number of encryptions contributes to being able to distinguish Tor from non-Tor encrypted data traffic.
format Preprint
id arxiv_https___arxiv_org_abs_2405_09412
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Distinguishing Tor From Other Encrypted Network Traffic Through Character Analysis
Choorod, Pitpimon
Bauer, Tobias J.
Aßmuth, Andreas
Cryptography and Security
Machine Learning
Networking and Internet Architecture
For journalists reporting from a totalitarian regime, whistleblowers and resistance fighters, the anonymous use of cloud services on the Internet can be vital for survival. The Tor network provides a free and widely used anonymization service for everyone. However, there are different approaches to distinguishing Tor from non-Tor encrypted network traffic, most recently only due to the (relative) frequencies of hex digits in a single encrypted payload packet. While conventional data traffic is usually encrypted once, but at least three times in the case of Tor due to the structure and principle of the Tor network, we have examined to what extent the number of encryptions contributes to being able to distinguish Tor from non-Tor encrypted data traffic.
title Distinguishing Tor From Other Encrypted Network Traffic Through Character Analysis
topic Cryptography and Security
Machine Learning
Networking and Internet Architecture
url https://arxiv.org/abs/2405.09412