Playing Server Hide and Seek on the Tor Anonymity Network

Paul Syverson
Naval Research Laboratory

Monday, April 24, 2:00PM
Burchard 124
Computer Science Department
Stevens Institute of Technology
 

Abstract


Can you set up a server that anyone can access but no one can find? Yes you can. Since 2004 we have deployed location hidden servers on the Tor network. Anyone can set one up and hide it using Tor. (Tor is a freely available anonymous communication network developed by the Naval Research Laboratory and the Free Haven Project; see http://tor.eff.org. It is the most widely deployed and used anonymizing network ever in existence. It currently consists of about 450 servers worldwide and has an unknown (hidden) number of users estimated to be about a quarter million. Tor was named one of the 100 best products of 2005 by PC World.)

Hidden services have many uses from resisting server DDoS to anonymous blogging. Undergroundmedia.org has published a guide to "Torcasting" (anonymity-preserving and censorship-resistant podcasting). And both the Electronic Frontier Foundation and Reporters Without Borders have issued guides that describe using hidden services via Tor to protect the safety of dissidents as well as resist censorship.

Our primary focus in this presentation will be attacks. I will start by describing the basic motivation and design of the Tor network and of hidden services. I will then demonstrate attacks we have recently carried out in experiments on the deployed Tor network that uncover the location of hidden servers in a matter of minutes. I will also tell you how to protect against these attacks. I will present entry guard nodes and other countermeasures to these attacks that have recently been implemented and describe how they counter the attacks.

Work on attacks and countermeasures is joint with Lasse Øverlier and will be published at the IEEE Symposium on Security and Privacy. The paper "Locating Hidden Servers" can be obtained at http://www.onion-router.net.