@inproceedings{5440450593e04f78bd85894049c0b2c9,
title = "The DUSTER attack: Tor onion service attribution based on flow watermarking with track hiding",
abstract = "Tor is a distributed network composed of volunteer relays which is designed to preserve the sender-receiver anonymity of communications on the Internet. Despite the use of the onion routing paradigm, Tor is vulnerable to traffic analysis attacks. In this paper we present DUSTER, an active traffic analysis attack based on flow watermarking that exploits a vulnerability in Tor{\textquoteright}s congestion control mechanism in order to link a Tor onion service with its real IP address. The proposed watermarking system embeds a watermark at the destination of a Tor circuit which is propagated throughout the Tor network and can be detected by our modified Tor relays in the proximity of the onion service. Furthermore, upon detection the watermark is cancelled so that the target onion service remains unaware of its presence. We performed a set of experiments over the real Tor network in order to evaluate the feasibility of this attack. Our results show that true positive rates above 94% and false positive rates below 0.05% can be easily obtained. Finally we discuss a solution to mitigate this and other traffic analysis attacks which exploit Tor{\textquoteright}s congestion control.",
author = "Alfonso Iacovazzi and Daniel Frassinelli and Yuval Elovici",
note = "Publisher Copyright: {\textcopyright} 2019 RAID 2019 Proceedings - 22nd International Symposium on Research in Attacks, Intrusions and Defenses. All rights reserved.; 22nd International Symposium on Research in Attacks, Intrusions and Defenses, RAID 2019 ; Conference date: 23-09-2019 Through 25-09-2019",
year = "2019",
month = jan,
day = "1",
language = "American English",
series = "RAID 2019 Proceedings - 22nd International Symposium on Research in Attacks, Intrusions and Defenses",
pages = "213--225",
booktitle = "RAID 2019 Proceedings - 22nd International Symposium on Research in Attacks, Intrusions and Defenses",
}