Chikwata chevaongorori kubva kuGeorgetown University neUS Naval Research Laboratory kuramba kweiyo isingazivikanwe yeTor network kurwiswa zvinotungamira mukuramba sevhisi (DoS). Tsvagiridzo mukukanganisa iyo Tor network inonyanya kuvakwa yakatenderedza censoring (kuvharira kupinda kuTor), kuzivisa zvikumbiro kuburikidza neTor mukufambiswa kwetraffic traffic, uye kuongorora kuwirirana kwetraffic inoyerera isati yapinda node uye mushure meTor yekubuda node yekudzima-kusazivikanwa vashandisi. Tsvagiridzo iyi inoratidza kuti kurwiswa kweDoS neTor kunoregeredzwa uye, nemutengo wezviuru zvemadhora pamwedzi, zvinogona kukonzera kukanganisa kuTor izvo zvinogona kumanikidza vashandisi kurega kushandisa Tor nekuda kwekusaita zvakanaka.
Vatsvagiri vakurudzira mamiriro matatu ekuita kurwisa kweDoS: kugadzira kusangana pakati pemabhiriji node, kusaenzana kwemutoro uye kugadzira kusangana pakati pemarelay, kuitiswa kwacho kunoda kuti anorwisa ave ne30, 5 uye 3 Gbit / s. Mukutaura kwemari, mutengo wekuita kurwisa mukati memwedzi uchava 17, 2.8 uye 1.6 zviuru zvemadhora, zvichiteerana. Kuenzanisa, kuita yakananga DDoS kurwisa kukanganisa Tor kunoda 512.73 Gbit/s yebandwidth uye inodhura $7.2 miriyoni pamwedzi.
Nzira yekutanga, pamutengo we 17 zviuru zvemadhora pamwedzi, kuburikidza nemafashamo mashoma seti yebhiriji node ine kusimba kwe30 Gbit / s inoderedza kukurumidza kwekudhawunirodha data nevatengi ne44%. Munguva yekuedzwa, gumi nemaviri chete obfs12 mabhiriji node kunze kwe4 akasara achishanda (haana kuverengerwa muzvinyorwa zveruzhinji dhairekitori maseva uye anoshandiswa kunzvenga kuvharika kwesentinel node), izvo zvinoita kuti zvikwanisike kudirana mafashama akasara mabhiriji node. . Vagadziri veTor vanogona kupeta kaviri mutengo wekugadzirisa uye kudzoreredza nzvimbo dzakashaikwa, asi munhu anorwisa anongoda kuwedzera mari yavo kusvika kumadhora zviuru makumi matatu nesere pamwedzi kurwisa ese makumi matatu nemasere mabhiriji.
Yechipiri nzira, inoda 5 Gbit/s yekurwiswa, yakavakirwa pakukanganisa iyo yepakati TorFlow bandwidth kuyerwa system uye inogona kuderedza avhareji yekurodha data yevatengi ne80%. TorFlow inoshandiswa pakuyera kuyera, izvo zvinobvumira kurwiswa kukanganisa kugoverwa kwetraffic uye kuronga mafambiro ayo kuburikidza nenhamba shoma yemaseva, zvichiita kuti vawedzere.
Nzira yechitatu, iyo 3 Gbit / s yakakwana, inobva pakushandisa yakagadziridzwa Tor mutengi kugadzira mutoro weparasitic, iyo inoderedza kukurumidza kwekutorwa kwevatengi ne 47% pamutengo we 1.6 zviuru zvemadhora pamwedzi. Nekuwedzera mutengo wekurwisa kusvika 6.3 zviuru zvemadhora, unogona kuderedza kumhanya kwevatengi kurodha ne120%. Mutengi akagadziridzwa, panzvimbo yekuvakwa kwakajairwa kweketani yemanodhi matatu (yekupinda, yepakati uye yekubuda node), inoshandisa ketani ye8 node inotenderwa neprotocol ine huwandu hwakawanda hwehops pakati pemanodhi, mushure mezvo inokumbira kurodha pasi. mafaira makuru uye inomisa kushanda kwekuverenga mushure mekutumira zvikumbiro, asi inoramba ichitumira kutonga SENDME mirairo iyo inorayira mabhii ekuisa kuti aenderere mberi nekutumira data.
Zvinocherechedzwa kuti kutanga kuramba sevhisi kunoshanda zvakanyanya pane kuronga kurwisa kweDoS uchishandisa nzira yeSybil pamitengo yakafanana. Iyo nzira yeSybil inosanganisira kuisa nhamba yakakura yeayo mareyi paTor network, iyo macheni anogona kuraswa kana bandwidth kuderedzwa. Tichipihwa bhajeti rekurwisa re30, 5, uye 3 Gbit/s, nzira yeSybil inowana kudzikiswa kwekuita kwe32%, 7.2%, uye 4.5% yezvinobuda node, zvichiteerana. Nepo kurwiswa kweDoS kwakarongwa muchidzidzo kuchivhara node dzese.
Kana tikaenzanisa mari yacho nedzimwe mhando dzekurwiswa, tobva taita kurwisa kuti usazivikanwe nevashandisi vane bhajeti re30 Gbit/s zvinotitendera kuwana kutonga pamusoro pe21% yeinouya uye 5.3% yemanode anobuda uye kuwana kufukidzwa kwe. node dzese mucheni mu1.1% yemakesi. Kune 5 uye 3 Gbit / s bhajeti, kubudirira kuchava 0.06% (4.5% inopinda, 1.2% egress nodes) uye 0.02% (2.8% inopinda, 0.8% egress nodes).
Source: opennet.ru