{"id":37276,"date":"2019-10-31T22:16:42","date_gmt":"2019-10-31T19:16:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor\/"},"modified":"2019-10-31T22:16:42","modified_gmt":"2019-10-31T19:16:42","slug":"dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","title":{"rendered":"DoS \u00fatoky na zn\u00ed\u017eenie v\u00fdkonnosti siete Tor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Skupina v\u00fdskumn\u00edkov z Georgetown University a v\u00fdskumnej laborat\u00f3ria n\u00e1mornej flotily USA analyzovali<\/a><\/noindex> odolnos\u0165 anonymnej siete Tor proti \u00fatokom, ktor\u00e9 ved\u00fa k odmietnutiu slu\u017eby (DoS). V\u00fdskum v oblasti kompromit\u00e1cie siete Tor sa preva\u017ene zameriava na cenz\u00farovanie (blokovanie pr\u00edstupu k Tor), ur\u010denie po\u017eiadaviek cez Tor v tranzitnom prenosu a anal\u00fdzu korel\u00e1cie prenosov\u00fdch tokov pred vstupn\u00fdm uzlom a po v\u00fdstupnom uzle Tor na deanonimiz\u00e1ciu pou\u017e\u00edvate\u013eov. Predlo\u017een\u00fd v\u00fdskum ukazuje, \u017ee organiz\u00e1cia DoS-\u00fatokov na Tor je m\u00e1lo zoh\u013eadnen\u00e1 a pri n\u00e1kladoch nieko\u013eko tis\u00edc dol\u00e1rov mesa\u010dne je celkom re\u00e1lne vytvori\u0165 podmienky na naru\u0161enie norm\u00e1lnej prev\u00e1dzky Tor, ktor\u00e9 m\u00f4\u017eu don\u00fati\u0165 pou\u017e\u00edvate\u013eov presta\u0165 pou\u017e\u00edva\u0165 Tor kv\u00f4li zl\u00e9mu v\u00fdkonu.<\/p>\n

V\u00fdskumn\u00edci navrhli tri scen\u00e1re na vykonanie DoS-\u00fatokov: vytvorenie z\u00e1tar\u00e1s medzi mostov\u00fdmi uzlami, naru\u0161enie za\u0165a\u017eenia a vytvorenie z\u00e1tar\u00e1s medzi rel\u00e9mi, na \u010do \u00fato\u010dn\u00edk potrebuje \u0161\u00edrku p\u00e1sma 30, 5 a 3 Gbit\/s. V pe\u0148a\u017enom ekvivalente bude cena vykonania \u00fatoku na mesiac predstavova\u0165 17, 2.8 a 1.6 tis\u00edc dol\u00e1rov. Na porovnanie, vykonanie DDoS-\u00fatoku na priamu naru\u0161enie Tor si vy\u017eaduje \u0161\u00edrku p\u00e1sma 512.73 Gbit\/s a bude st\u00e1\u0165 7.2 mili\u00f3na dol\u00e1rov mesa\u010dne.<\/p>\n

Prv\u00e1 met\u00f3da, pri n\u00e1kladoch 17 tis\u00edc dol\u00e1rov mesa\u010dne, prostredn\u00edctvom floodingu obmedzen\u00e9ho po\u010dtu mostov\u00fdch uzlov s intenzitou 30 Gbit\/s zn\u00ed\u017ei r\u00fdchlos\u0165 s\u0165ahovania d\u00e1t klientmi o 44 %. Po\u010das testov zostalo v prev\u00e1dzke iba 12 mostov\u00fdch uzlov obfs4 z 38 (nie s\u00fa zahrnut\u00e9 v zoznamoch verejn\u00fdch katal\u00f3gov a pou\u017e\u00edvaj\u00fa sa na ob\u00eddenie blok\u00e1d str\u00e1\u017enych uzlov), \u010do umo\u017e\u0148uje selekt\u00edvne vypn\u00fa\u0165 zost\u00e1vaj\u00face v prev\u00e1dzke mostov\u00e9 uzly floodingom. V\u00fdvoj\u00e1ri Tor m\u00f4\u017eu zdvojn\u00e1sobi\u0165 n\u00e1klady na \u00fadr\u017ebu a obnovi\u0165 prev\u00e1dzku ch\u00fdbaj\u00facich uzlov, ale \u00fato\u010dn\u00edkovi bude sta\u010di\u0165 zv\u00fd\u0161i\u0165 svoje n\u00e1klady na 31 tis\u00edc dol\u00e1rov mesa\u010dne na to, aby vykonal \u00fatok na v\u0161etk\u00fdch 38 mostov\u00fdch uzlov. serverov<\/a> v\u00fdskumn\u00edci odpor\u00fa\u010daj\u00fa tri scen\u00e1re na vykonanie DoS-\u00fatokov: vytvorenie z\u00e1tar\u00e1s medzi mostov\u00fdmi uzlami, naru\u0161enie za\u0165a\u017eenia a vytvorenie z\u00e1tar\u00e1s medzi rel\u00e9mi, na \u010do \u00fato\u010dn\u00edk potrebuje \u0161\u00edrku p\u00e1sma 30, 5 a 3 Gbit\/s. V pe\u0148a\u017enom ekvivalente bude cena vykonania \u00fatoku na mesiac predstavova\u0165 17, 2.8 a 1.6 tis\u00edc dol\u00e1rov. Na porovnanie, vykonanie DDoS-\u00fatoku na priamu naru\u0161enie Tor si vy\u017eaduje \u0161\u00edrku p\u00e1sma 512.73 Gbit\/s a bude st\u00e1\u0165 7.2 mili\u00f3na dol\u00e1rov mesa\u010dne.<\/p>\n

Druh\u00e1 met\u00f3da, ktor\u00e1 vy\u017eaduje na \u00fatok 5 Gbit\/s, je zalo\u017een\u00e1 na naru\u0161en\u00ed \u010dinnosti centralizovan\u00e9ho syst\u00e9mu merania prenosovej kapacity TorFlow a umo\u017e\u0148uje zn\u00ed\u017ei\u0165 priemern\u00fa r\u00fdchlos\u0165 s\u0165ahovania \u00fadajov klientmi o 80 %. TorFlow sa pou\u017e\u00edva na vyva\u017eovanie z\u00e1\u0165a\u017ee, \u010do v r\u00e1mci \u00fatoku umo\u017e\u0148uje naru\u0161i\u0165 rozdelenie prev\u00e1dzky a usmerni\u0165 ju cez obmedzen\u00fd po\u010det serverov, \u010do vedie k ich pre\u0165a\u017eeniu.<\/p>\n

Tretia met\u00f3da, pre ktor\u00fa sta\u010d\u00ed 3 Gbit\/s, sa zaklad\u00e1 na pou\u017eit\u00ed upraven\u00e9ho Tor klienta na vytvorenie parazitn\u00e9ho za\u0165a\u017eenia, \u010do umo\u017e\u0148uje zn\u00ed\u017ei\u0165 r\u00fdchlos\u0165 klientskych s\u0165ahovan\u00ed o 47 % pri n\u00e1kladoch 1.6 tis\u00edc dol\u00e1rov mesa\u010dne. Pri zv\u00fd\u0161en\u00ed n\u00e1kladov na \u00fatok na 6.3 tis\u00edc dol\u00e1rov je mo\u017en\u00e9 dosiahnu\u0165 zn\u00ed\u017eenie r\u00fdchlosti klientskych s\u0165ahovan\u00ed o 120 %. Upraven\u00fd klient namiesto \u0161tandardn\u00e9ho vytvorenia re\u0165azca z troch uzlov (vstupn\u00fd, medzistup\u0148ov\u00fd a v\u00fdstupn\u00fd uzol) pou\u017e\u00edva povolen\u00fd protokolov\u00fd re\u0165azec z 8 uzlov s maxim\u00e1lnym po\u010dtom skokov medzi uzlami, po \u010dom po\u017eaduje s\u0165ahovanie ve\u013ek\u00fdch s\u00faborov a pozastavuje oper\u00e1cie \u010d\u00edtania po odoslan\u00ed po\u017eiadaviek, no pokra\u010duje v odosielan\u00ed kontroln\u00fdch pr\u00edkazov SENDME, in\u0161truuj\u00facich vstupn\u00e9 uzly pokra\u010dova\u0165 v prenose \u00fadajov. <\/p>\n

Je zaznamenan\u00e9, \u017ee iniciovanie odmietnutia slu\u017eby je v\u00fdrazne efekt\u00edvnej\u0161ie ako organiz\u00e1cia DoS \u00fatoku metodou Sybil pri podobn\u00fdch n\u00e1kladoch. Met\u00f3da Sybil predpoklad\u00e1 umiestnenie vo vlastnej sieti Tor ve\u013ek\u00e9ho po\u010dtu vlastn\u00fdch relayov, na ktor\u00fdch je mo\u017en\u00e9 odstra\u0148ova\u0165 re\u0165azce alebo obmedzova\u0165 prenosov\u00fa kapacitu. Pri rozpo\u010dte na \u00fatok vo v\u00fd\u0161ke 30, 5 a 3 Gbit\/s met\u00f3da Sybil umo\u017e\u0148uje dosiahnu\u0165 zn\u00ed\u017eenie v\u00fdkonu pre 32 %, 7.2 % a 4.5 % v\u00fdstupn\u00fdch uzlov, pr\u00edslu\u0161ne. Zatia\u013e \u010do navrhnut\u00e9 v r\u00e1mci \u0161t\u00fadie DoS \u00fatoky pokr\u00fdvaj\u00fa v\u0161etky uzly.<\/p>\n

Ak porovn\u00e1me n\u00e1klady s in\u00fdmi druhmi \u00fatokov, uskuto\u010dnenie \u00fatoku na deanonimiz\u00e1ciu pou\u017e\u00edvate\u013eov s rozpo\u010dtom 30 Gbit\/s umo\u017en\u00ed dosiahnu\u0165 kontrolu nad 21 % vstupn\u00fdmi a 5.3 % v\u00fdstupn\u00fdmi uzlami a dosiahnu\u0165 pokrytie v\u0161etk\u00fdch uzlov re\u0165azca v 1.1 % pr\u00edpadoch. Pre rozpo\u010dty 5 a 3 Gbit\/s bude \u00fa\u010dinnos\u0165 predstavova\u0165 0.06 % (4.5 % vstupn\u00fdch, 1.2 % v\u00fdstupn\u00fdch uzlov) a 0.02 % (2.8 % vstupn\u00fdch, 0.8 % v\u00fdstupn\u00fdch uzlov).<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0414\u0436\u043e\u0440\u0434\u0436\u0442\u0430\u0443\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0412\u041c\u0421 \u0421\u0428\u0410 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0441\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Tor \u043a \u0430\u0442\u0430\u043a\u0430\u043c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u043c \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 Tor \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u0442\u0440\u043e\u044f\u0442\u0441\u044f \u0432\u043e\u043a\u0440\u0443\u0433 \u0446\u0435\u043d\u0437\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a Tor), \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 Tor \u0432 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u0435 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u0440\u0440\u0435\u043b\u044f\u0446\u0438\u0438 \u043f\u043e\u0442\u043e\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0435\u0440\u0435\u0434 \u0432\u0445\u043e\u0434\u043d\u044b\u043c \u0443\u0437\u043b\u043e\u043c \u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37276","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DoS \u00fatoky na zn\u00ed\u017eenie v\u00fdkonu siete Tor | ProHoster","description":"Skupina v\u00fdskumn\u00edkov z Georgetown University a v\u00fdskumnej laborat\u00f3ria n\u00e1morn\u00edctva USA analyzovala.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DoS-\u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0438 Tor | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0414\u0436\u043e\u0440\u0434\u0436\u0442\u0430\u0443\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0412\u041c\u0421 \u0421\u0428\u0410 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:42+00:00","article:modified_time":"2019-10-31T19:16:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37276","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:59:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:30:00","updated":"2026-02-09 17:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/37276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=37276"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/37276\/revisions"}],"predecessor-version":[{"id":158595,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/37276\/revisions\/158595"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=37276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=37276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=37276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}