{"id":37276,"date":"2019-10-31T22:16:42","date_gmt":"2019-10-31T19:16:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor\/"},"modified":"2019-10-31T22:16:42","modified_gmt":"2019-10-31T19:16:42","slug":"dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","title":{"rendered":"DoS \u00fatoky pro sn\u00ed\u017een\u00ed v\u00fdkonu s\u00edt\u011b Tor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Skupina v\u00fdzkumn\u00edk\u016f z Georgetown University a v\u00fdzkumn\u00e9 laborato\u0159e americk\u00e9ho n\u00e1mo\u0159nictva analyzovali<\/a><\/noindex> odolnost anonymn\u00ed s\u00edt\u011b Tor v\u016f\u010di \u00fatok\u016fm, kter\u00e9 vedou k do\u010dasn\u00e9mu v\u00fdpadku slu\u017eby (DoS). V\u00fdzkumy zam\u011b\u0159en\u00e9 na kompromitaci s\u00edt\u011b Tor se v\u011bt\u0161inou soust\u0159ed\u00ed na cenzurov\u00e1n\u00ed (blokov\u00e1n\u00ed p\u0159\u00edstupu k Tor), ur\u010den\u00ed po\u017eadavk\u016f p\u0159ich\u00e1zej\u00edc\u00edch p\u0159es Tor v tranzitn\u00edm provozu a anal\u00fdzu korelace tok\u016f provozu p\u0159ed vstupn\u00edm uzlem a po v\u00fdstupn\u00edm uzlu Tor za \u00fa\u010delem de-anonymizace u\u017eivatel\u016f. P\u0159edlo\u017een\u00e1 studie ukazuje, \u017ee organizace DoS \u00fatok\u016f na Tor je p\u0159ehl\u00ed\u017eena a s n\u00e1klady n\u011bkolika tis\u00edc dolar\u016f m\u011bs\u00ed\u010dn\u011b je zcela re\u00e1ln\u00e9 vytvo\u0159it podm\u00ednky pro naru\u0161en\u00ed norm\u00e1ln\u00edho provozu Tor, kter\u00e9 mohou u\u017eivatele donutit p\u0159estat Tor pou\u017e\u00edvat kv\u016fli \u0161patn\u00e9mu v\u00fdkonu.<\/p>\n

V\u00fdzkumn\u00edci navrhli t\u0159i sc\u00e9n\u00e1\u0159e prov\u00e1d\u011bn\u00ed DoS \u00fatok\u016f: vytv\u00e1\u0159en\u00ed z\u00e1cp mezi mostov\u00fdmi uzly, nerovnom\u011brn\u00e9 zat\u00ed\u017een\u00ed a vytv\u00e1\u0159en\u00ed z\u00e1cp mezi rel\u00e9, k jejich\u017e realizaci je pot\u0159eba, aby \u00fato\u010dn\u00edk m\u011bl propustnost 30, 5 a 3 Gbit\/s. V pen\u011b\u017en\u00edm vyj\u00e1d\u0159en\u00ed n\u00e1klady na proveden\u00ed \u00fatoku po dobu m\u011bs\u00edce budou \u010dinit 17, 2.8 a 1.6 tis\u00edce dolar\u016f, respektive. Pro srovn\u00e1n\u00ed, proveden\u00ed DDoS \u00fatoku \u010deln\u00edmi prost\u0159edky za \u00fa\u010delem naru\u0161en\u00ed pr\u00e1ce Tor bude vy\u017eadovat propustnost 512.73 Gbit\/s a bude st\u00e1t 7.2 milionu dolar\u016f m\u011bs\u00ed\u010dn\u011b.<\/p>\n

Prvn\u00ed metoda, p\u0159i n\u00e1kladech 17 tis\u00edc dolar\u016f m\u011bs\u00ed\u010dn\u011b, prost\u0159ednictv\u00edm floodu omezen\u00e9ho po\u010dtu mostov\u00fdch uzl\u016f s intenzitou 30 Gbit\/s sn\u00ed\u017e\u00ed rychlost stahov\u00e1n\u00ed dat u\u017eivateli o 44 %. P\u0159i prov\u00e1d\u011bn\u00ed test\u016f z\u016fst\u00e1valo v provozu pouze 12 mostov\u00fdch uzl\u016f obfs4 z 38 (nejsou uvedeny v seznamech ve\u0159ejn\u00fdch servery<\/a> katalog\u016f a pou\u017e\u00edvaj\u00ed se k obch\u00e1zen\u00ed blokace str\u00e1\u017en\u00edch uzl\u016f), co\u017e umo\u017e\u0148uje c\u00edlen\u011b vypnout zb\u00fdvaj\u00edc\u00ed provozuschopn\u00e9 mostov\u00e9 uzly floodem. V\u00fdvoj\u00e1\u0159i Tor mohou zdvojn\u00e1sobit n\u00e1klady na \u00fadr\u017ebu a obnovit provoz chyb\u011bj\u00edc\u00edch uzl\u016f, ale \u00fato\u010dn\u00edkovi posta\u010d\u00ed zv\u00fd\u0161it sv\u00e9 n\u00e1klady na 31 tis\u00edc dolar\u016f m\u011bs\u00ed\u010dn\u011b pro proveden\u00ed \u00fatoku na v\u0161ech 38 mostov\u00fdch uzl\u016f.<\/p>\n

Druh\u00e1 metoda, kter\u00e1 vy\u017eaduje pro \u00fatok 5 Gbit\/s, je zalo\u017eena na naru\u0161en\u00ed fungov\u00e1n\u00ed centralizovan\u00e9ho syst\u00e9mu m\u011b\u0159en\u00ed propustnosti TorFlow a umo\u017e\u0148uje sn\u00ed\u017eit pr\u016fm\u011brnou rychlost stahov\u00e1n\u00ed dat z\u00e1kazn\u00edky o 80 %. TorFlow se pou\u017e\u00edv\u00e1 pro vyva\u017eov\u00e1n\u00ed z\u00e1t\u011b\u017ee, co\u017e umo\u017e\u0148uje v r\u00e1mci \u00fatoku naru\u0161it rozd\u011blen\u00ed provozu a organizovat jeho proch\u00e1zen\u00ed prost\u0159ednictv\u00edm omezen\u00e9ho po\u010dtu server\u016f, co\u017e zp\u016fsobuje jejich p\u0159et\u00ed\u017een\u00ed.<\/p>\n

T\u0159et\u00ed metoda, pro kterou sta\u010d\u00ed 3 Gbit\/s, je zalo\u017eena na pou\u017eit\u00ed modifikovan\u00e9ho Tor klienta k vytvo\u0159en\u00ed parazitn\u00ed z\u00e1t\u011b\u017ee, co\u017e umo\u017e\u0148uje sn\u00ed\u017eit rychlost z\u00e1kaznick\u00e9ho stahov\u00e1n\u00ed o 47 % p\u0159i n\u00e1kladech 1,6 tis\u00edce dolar\u016f m\u011bs\u00ed\u010dn\u011b. P\u0159i zv\u00fd\u0161en\u00ed n\u00e1klad\u016f na \u00fatok na 6,3 tis\u00edce dolar\u016f je mo\u017en\u00e9 dos\u00e1hnout sn\u00ed\u017een\u00ed rychlosti z\u00e1kaznick\u00e9ho stahov\u00e1n\u00ed o 120 %. Modifikovan\u00fd klient m\u00edsto standardn\u00edho vytv\u00e1\u0159en\u00ed \u0159et\u011bzce ze t\u0159\u00ed uzl\u016f (vstupn\u00ed, mezilehl\u00fd a v\u00fdstupn\u00ed uzel) pou\u017e\u00edv\u00e1 povolen\u00fd protokolem \u0159et\u011bzec z 8 uzl\u016f s maxim\u00e1ln\u00edm po\u010dtem skok\u016f mezi uzly, pot\u00e9 po\u017eaduje stahov\u00e1n\u00ed velk\u00fdch soubor\u016f a pozastavuje operace \u010dten\u00ed po odesl\u00e1n\u00ed \u017e\u00e1dost\u00ed, ale pokra\u010duje v odes\u00edl\u00e1n\u00ed \u0159\u00eddic\u00edch p\u0159\u00edkaz\u016f SENDME, kter\u00e9 instruuj\u00ed vstupn\u00ed uzly pokra\u010dovat v p\u0159enosu dat. <\/p>\n

Zaznamen\u00e1v\u00e1 se, \u017ee iniciace odm\u00edtnut\u00ed slu\u017eby je znateln\u011b efektivn\u011bj\u0161\u00ed ne\u017e organizace DoS \u00fatoku metodou Sybil p\u0159i srovnateln\u00fdch n\u00e1kladech. Metoda Sybil zahrnuje um\u00edst\u011bn\u00ed do s\u00edt\u011b Tor velk\u00e9ho po\u010dtu vlastn\u00edch relay\u016f, na kter\u00fdch je mo\u017en\u00e9 odstra\u0148ovat \u0159et\u011bzce nebo omezovat propustnost. P\u0159i rozpo\u010dtu na \u00fatok 30, 5 a 3 Gbit\/s umo\u017e\u0148uje metoda Sybil dos\u00e1hnout sn\u00ed\u017een\u00ed v\u00fdkonu pro 32 %, 7,2 % a 4,5 % v\u00fdstupn\u00edch uzl\u016f, resp. Zat\u00edmco navrhovan\u00e9 DoS \u00fatoky v r\u00e1mci studie pokr\u00fdvaj\u00ed v\u0161echny uzly.<\/p>\n

Pokud porovn\u00e1me n\u00e1klady s jin\u00fdmi typy \u00fatok\u016f, realizace \u00fatoku na de-anonymizaci u\u017eivatel\u016f s rozpo\u010dtem 30 Gbit\/s umo\u017en\u00ed dos\u00e1hnout kontroly nad 21 % vstupn\u00edmi a 5,3 % v\u00fdstupn\u00edmi uzly a zajistit pokryt\u00ed v\u0161ech uzl\u016f \u0159et\u011bzce v 1,1 % p\u0159\u00edpadech. Pro rozpo\u010dty 5 a 3 Gbit\/s bude efektivita \u010dinit 0,06 % (4,5 % vstupn\u00edch, 1,2 % v\u00fdstupn\u00edch uzl\u016f) a 0,02 % (2,8 % vstupn\u00edch, 0,8 % v\u00fdstupn\u00edch uzl\u016f).<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0414\u0436\u043e\u0440\u0434\u0436\u0442\u0430\u0443\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0412\u041c\u0421 \u0421\u0428\u0410 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0441\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Tor \u043a \u0430\u0442\u0430\u043a\u0430\u043c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u043c \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 Tor \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u0442\u0440\u043e\u044f\u0442\u0441\u044f \u0432\u043e\u043a\u0440\u0443\u0433 \u0446\u0435\u043d\u0437\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a Tor), \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 Tor \u0432 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u0435 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u0440\u0440\u0435\u043b\u044f\u0446\u0438\u0438 \u043f\u043e\u0442\u043e\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0435\u0440\u0435\u0434 \u0432\u0445\u043e\u0434\u043d\u044b\u043c \u0443\u0437\u043b\u043e\u043c \u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37276","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DoS \u00fatoky ke sn\u00ed\u017een\u00ed v\u00fdkonu s\u00edt\u011b Tor | ProHoster","description":"Skupina v\u00fdzkumn\u00edk\u016f z Georgetownsk\u00e9 univerzity a v\u00fdzkumn\u00e9 laborato\u0159e N\u00e1mo\u0159nictva USA provedla anal\u00fdzu.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DoS-\u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0438 Tor | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0414\u0436\u043e\u0440\u0434\u0436\u0442\u0430\u0443\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0412\u041c\u0421 \u0421\u0428\u0410 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:42+00:00","article:modified_time":"2019-10-31T19:16:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37276","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:59:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:30:00","updated":"2026-02-09 17:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/37276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=37276"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/37276\/revisions"}],"predecessor-version":[{"id":158595,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/37276\/revisions\/158595"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=37276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=37276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=37276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}