{"id":37276,"date":"2019-10-31T22:16:42","date_gmt":"2019-10-31T19:16:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor\/"},"modified":"2019-10-31T22:16:42","modified_gmt":"2019-10-31T19:16:42","slug":"dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","title":{"rendered":"DoS-r\u00fcnnakud Tor-v\u00f5rgu j\u00f5udluse v\u00e4hendamiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Georgetown \u00dclikooli ja USA Merev\u00e4e Teaduslaboratooriumi teadlaste r\u00fchm anal\u00fc\u00fcsisid<\/a><\/noindex> Tor anon\u00fc\u00fcmse v\u00f5rgustiku vastupanu teenuse katkestamise (DoS) r\u00fcnnakutele. Uuringud Tori v\u00f5rgu kompromiteerimise kohta keskenduvad peamiselt tsensuurile (Tor-i juurdep\u00e4\u00e4su blokeerimisele), Tor-i kaudu tehtud p\u00e4ringute m\u00e4\u00e4ratlemisele transit-turul ja liikluse voogude korrelatsiooni anal\u00fc\u00fcsimisele enne Tor-i sisenemispunkte ja p\u00e4rast Tor-i v\u00e4ljundpunkte, et deanon\u00fc\u00fcmida kasutajaid. Esitatud uurimus n\u00e4itab, et DoS-r\u00fcnnakute korraldamine Tor-i vastu j\u00e4\u00e4b t\u00e4helepanuta ja m\u00f5ne tuhande dollari suuruste kuludega kuus on t\u00e4iesti reaalne luua tingimused Tor-i normaalse t\u00f6\u00f6 h\u00e4irimiseks, mis v\u00f5ib sundida kasutajaid Tor-i kasutamisest loobuma halva tootlikkuse t\u00f5ttu.<\/p>\n

Teadlased on pakkunud v\u00e4lja kolm stsenaariumi DoS-r\u00fcnnakute l\u00e4biviimiseks: ummikute loomine silla s\u00f5lmede vahel, koormuse tasakaalustamine ja ummikute tekitamine, milleks on r\u00fcndajal vaja 30, 5 ja 3 Gbit\/s l\u00e4bilaskev\u00f5imet. Raha ekvivalentne r\u00fcnnaku l\u00e4biviimise maksumus kuus oleks vastavalt 17, 2,8 ja 1,6 tuhat dollarit. V\u00f5rdluseks: Tor-i toimimise h\u00e4irimine otsese DDoS-r\u00fcnnaku kaudu vajaks 512,73 Gbit\/s l\u00e4bilaskev\u00f5imet ja maksaks 7,2 miljonit dollarit kuus.<\/p>\n

Esimene meetod, mille maksumus on 17 tuhat dollarit kuus, piiratud silla s\u00f5lmede komplekti \u00fclekoormamisega kiirusel 30 Gbit\/s, v\u00e4hendab klientide andmeedastuskiirus 44% v\u00f5rra. Testimise k\u00e4igus j\u00e4i tegevusse ainult 12 obfs4 silla s\u00f5lme 38-st (mis ei kuulu avalikesse kataloogidesse ja mida kasutatakse valveseoste blokeerimise \u00fcletamiseks), mis v\u00f5imaldab valikuliselt v\u00e4lja l\u00fclitada \u00fclej\u00e4\u00e4nud aktiivsed silla s\u00f5lmed. Tor-i arendajad v\u00f5iksid kulusid kahekordistada ja taastada puuduvad s\u00f5lmed, kuid r\u00fcndajale piisab 31 tuhande dollari suurusest kuustest kuludest, et r\u00fcnnata k\u00f5iki 38 silla s\u00f5lme. serverid<\/a> R\u00fcndaja saab kulusid suurendada kuni 31 tuhande dollarini kuus, et r\u00fcnnata k\u00f5iki 38 silla s\u00f5lme.<\/p>\n

Teine meetod, mis n\u00f5uab 5 Gbit\/s r\u00fcnnakuks, p\u00f5hineb TorFlow keskse laiuse m\u00f5\u00f5tmise s\u00fcsteemi t\u00f6\u00f6d rikkumise otsusel ja v\u00f5imaldab v\u00e4hendada klientide keskmist andmeedastuskiirus 80%. TorFlow kasutatakse koormuse jaotamiseks, mis v\u00f5imaldab r\u00fcnnaku raames rikkuda liikluse jaotust ja suunata see piiratud arvu serverite kaudu, p\u00f5hjustades nende \u00fclekoormuse.<\/p>\n

Kolmas meetod, milleks piisab 3 Gbit\/s, p\u00f5hineb muudetud Tor-kliendi kasutamisel parasiitse koormuse tekitamiseks, mis v\u00f5imaldab v\u00e4hendada klientide allalaadimiskiirus 47% v\u00f5rra, kulutades 1.6 tuhat dollarit kuus. R\u00fcnnaku kulutuste t\u00f5stmisel 6.3 tuhande dollarini on v\u00f5imalik saavutada klientide allalaadimiskiirus, mis langen 120%. Muudetud klient ei kasuta tavalist kolme s\u00f5lme (sisse-, vahe- ja v\u00e4ljund) ketti, vaid rakendab protokolliga lubatud kaheksa s\u00f5lme kett, mille vaheline hargnemine on maksimaalne, p\u00e4rast mida ta k\u00fcsib suuremate failide allalaadimist ja peatab lugemistegevused p\u00e4rast p\u00e4ringute saatmist, kuid j\u00e4tkab juhtimiscommandide SENDME saatmist, k\u00e4skides sisse tulevatel s\u00f5lmedel andmete edastamist j\u00e4tkata. <\/p>\n

Tuleb m\u00e4rkida, et teenuse osutamise katkestamise algatamine on m\u00e4rgatavalt efektiivsem kui Sybili meetodil DoS-r\u00fcnnaku korraldamine sama kulutuste puhul. Sybili meetod t\u00e4hendab Tor-is suure hulga enda reljeefide paigutamist, millel saab katkestada ketid v\u00f5i piirata laiuskaalu. R\u00fcnnaku eelarve puhul 30, 5 ja 3 Gbit\/s v\u00f5imaldab Sybili meetod saavutada 32%, 7.2% ja 4.5% v\u00e4ljund s\u00f5lmede j\u00f5udluse langust. Samas katab uurimuses ettepanekud DoS-r\u00fcnnakud k\u00f5ik s\u00f5lmed.<\/p>\n

Kui v\u00f5rreldakse kulutusi teiste r\u00fcnnakut\u00fc\u00fcpidega, siis kasutajate deanon\u00fc\u00fcmimise r\u00fcnnaku l\u00e4biviimine eelarvega 30 Gbit\/s v\u00f5imaldab saavutada kontrolli 21% sisenemis- ja 5.3% v\u00e4ljund s\u00f5lmede \u00fcle ning ulatus kogu s\u00f5lmede ketis 1.1% juhtudel. Eelarvetega 5 ja 3 Gbit\/s on efektiivsus vastavalt 0.06% (4.5% sisenemise, 1.2% v\u00e4ljund s\u00f5lmed) ja 0.02% (2.8% sisenemine, 0.8% v\u00e4ljund s\u00f5lmede).<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0414\u0436\u043e\u0440\u0434\u0436\u0442\u0430\u0443\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0412\u041c\u0421 \u0421\u0428\u0410 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0441\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Tor \u043a \u0430\u0442\u0430\u043a\u0430\u043c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u043c \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 Tor \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u0442\u0440\u043e\u044f\u0442\u0441\u044f \u0432\u043e\u043a\u0440\u0443\u0433 \u0446\u0435\u043d\u0437\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a Tor), \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 Tor \u0432 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u0435 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u0440\u0440\u0435\u043b\u044f\u0446\u0438\u0438 \u043f\u043e\u0442\u043e\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0435\u0440\u0435\u0434 \u0432\u0445\u043e\u0434\u043d\u044b\u043c \u0443\u0437\u043b\u043e\u043c \u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37276","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DoS-r\u00fcnnakud Tor v\u00f5rgu j\u00f5udluse alandamiseks | ProHoster","description":"Georgetowni \u00fclikooli ja USA merev\u00e4e teaduslabori uurijate r\u00fchm anal\u00fc\u00fcsis.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DoS-\u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0438 Tor | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0414\u0436\u043e\u0440\u0434\u0436\u0442\u0430\u0443\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0412\u041c\u0421 \u0421\u0428\u0410 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:42+00:00","article:modified_time":"2019-10-31T19:16:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37276","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:59:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:30:00","updated":"2026-02-09 17:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=37276"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37276\/revisions"}],"predecessor-version":[{"id":158595,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37276\/revisions\/158595"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=37276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=37276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=37276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}