Abusers don’t get Privacy. Sensitively Logging and Blocking Tor Abuse
| dc.contributor.author | Marx, Matthias | |
| dc.contributor.editor | Reinhardt, Delphine | |
| dc.contributor.editor | Langweg, Hanno | |
| dc.contributor.editor | Witt, Bernhard C. | |
| dc.contributor.editor | Fischer, Mathias | |
| dc.date.accessioned | 2020-02-04T13:41:55Z | |
| dc.date.available | 2020-02-04T13:41:55Z | |
| dc.date.issued | 2020 | |
| dc.description.abstract | Tor has a significant problem with malicious traffic routed through Tor exit nodes. They create a credible reason for websites to discriminate against Tor users. The abuse also creates a strong disincentive to run exit nodes since the exit node operators have to deal with abuse messages and possible law enforcement interactions. We want to detect and mitigate the attacks that happen through Tor exit nodes without undermining Tor users’ anonymity and privacy. We use a modified version of the Tor exit node to enable NIDS (Network Intrusion Detection) monitoring and termination of malicious activity on a per-circuit level. We use the Zeek IDS (formerly Bro) to detect attacks using robust mechanisms that have very low false positive rates. Initial results indicate that, using our approach, the number of abuse cases can be reduced. | en |
| dc.identifier.doi | 10.18420/sicherheit2020_16 | |
| dc.identifier.isbn | 978-3-88579-695-4 | |
| dc.identifier.pissn | 1617-5468 | |
| dc.identifier.uri | https://dl.gi.de/handle/20.500.12116/31785 | |
| dc.language.iso | en | |
| dc.publisher | Gesellschaft für Informatik e.V. | |
| dc.relation.ispartof | SICHERHEIT 2020 | |
| dc.relation.ispartofseries | Lecture Notes in Informatics (LNI) - Proceedings, Volume P-301 | |
| dc.subject | Tor | |
| dc.subject | Malicious Traffic | |
| dc.subject | Intrusion Detection System | |
| dc.title | Abusers don’t get Privacy. Sensitively Logging and Blocking Tor Abuse | en |
| dc.type | Text/Conference Paper | |
| gi.citation.endPage | 158 | |
| gi.citation.publisherPlace | Bonn | |
| gi.citation.startPage | 153 | |
| gi.conference.date | 17.-20. März 2020 | |
| gi.conference.location | Göttingen, Germany | |
| gi.conference.sessiontitle | Doktorandenforum |
Dateien
Originalbündel
1 - 1 von 1