Litlhaselo tsa DoS ho fokotsa ts'ebetso ea marang-rang a Tor

Sehlopha sa bafuputsi ba tsoang Univesithing ea Georgetown le Laboratori ea Lipatlisiso ea Lebotho la United States hlahlobisitsoe khanyetso ea marang-rang a sa tsejoeng a Tor ho litlhaselo tse lebisang ho hanetsoeng ha tšebeletso (DoS). Lipatlisiso mabapi le ho sekisetsa marang-rang a Tor li hahiloe haholo ho pota-pota (ho thibela phihlello ea Tor), ho tsebahatsa likopo ka Tor ho sephethephethe sa lipalangoang, le ho sekaseka khokahano ea phallo ea sephethephethe pele ho node ea ho kena le ka mor'a node ea ho tsoa Tor ho hlakola basebelisi. Patlisiso ena e bonts'a hore litlhaselo tsa DoS khahlano le Tor li hlokomolohuoa, 'me, ka litšenyehelo tsa lidolara tse likete ka khoeli, li ka baka tšitiso ho Tor e ka qobellang basebelisi ho emisa ho sebelisa Tor ka lebaka la ts'ebetso e mpe.

Bafuputsi ba khothalelitse maemo a mararo a ho etsa litlhaselo tsa DoS: ho theha tšubuhlellano lipakeng tsa li-node tsa borokho, ho se leka-lekane ha meroalo le ho theha tšubuhlellano lipakeng tsa li-relay, ts'ebetsong ea eona e hlokang hore mohlaseli a be le phallo ea 30, 5 le 3 Gbit / s. Ka lichelete, litšenyehelo tsa ho etsa tlhaselo nakong ea khoeli e tla ba lidolara tse 17, 2.8 le 1.6 ka ho latellana. Ha ho bapisoa, ho etsa tlhaselo e tobileng ea DDoS ho senya Tor ho tla hloka 512.73 Gbit / s ea bandwidth mme e bitsa $ 7.2 milione ka khoeli.

Mokhoa oa pele, ka litšenyehelo tsa lidolara tse likete tse 17 ka khoeli, ka likhohola sete e lekanyelitsoeng ea li-node tsa borokho tse nang le matla a 30 Gbit / s li tla fokotsa lebelo la ho jarolla data ke bareki ka 44%. Nakong ea liteko, ke li-node tse 12 feela tsa borokho ho tse 4 tse ileng tsa sala li ntse li sebetsa (ha li kenyelelitsoe lethathamong la li-server tsa li-directory tsa sechaba 'me li sebelisetsoa ho qoba ho thibela li-node tsa sentinel), e leng se etsang hore ho khonehe ho tšela libaka tse setseng tsa borokho. . Bahlahisi ba Tor ba ka habeli litšenyehelo tsa tlhokomelo le ho khutlisetsa li-node tse sieo, empa mohlaseli o tla hloka feela ho eketsa litšenyehelo tsa bona ho $ 38 ka khoeli ho hlasela libaka tsohle tsa borokho tse 31.

Mokhoa oa bobeli, o hlokang 5 Gbit / s bakeng sa tlhaselo, o ipapisitse le ho senya sistimi e bohareng ea TorFlow bandwidth mme o ka fokotsa lebelo le tloaelehileng la ho jarolla data ho bareki ka 80%. TorFlow e sebelisoa bakeng sa ho leka-lekanya mojaro, e leng se lumellang tlhaselo ho senya kabo ea sephethephethe le ho hlophisa tsela ea eona ka palo e lekanyelitsoeng ea li-server, e leng se etsang hore li fete.

Mokhoa oa boraro, oo 3 Gbit / s o lekaneng, o itšetlehile ka ho sebelisa mochine oa Tor ea fetotsoeng ho etsa mojaro oa likokoana-hloko, o fokotsang lebelo la ho khoasolla bareki ka 47% ka litšenyehelo tsa liranta tse likete tse 1.6 ka khoeli. Ka ho eketsa litšenyehelo tsa tlhaselo ho lidolara tse likete tse 6.3, o ka fokotsa lebelo la ho khoasolla bareki ka 120%. Moreki ea fetotsoeng, ho e-na le kaho e tloaelehileng ea ketane ea li-node tse tharo (node ​​ea ho kenya, e bohareng le ea ho tsoa), e sebelisa ketane ea li-node tse 8 tse lumelloang ke protocol e nang le palo e kholo ea li-hops pakeng tsa li-node, ka mor'a moo e kopa ho kopitsa. lifaele tse kholo le ho emisa ts'ebetso ea ho bala ka mor'a ho romela likōpo, empa e tsoela pele ho romela litaelo tsa SENDME tse laelang li-node tsa ho kenya hore li tsoele pele ho fetisetsa data.

Hoa hlokomeloa hore ho qala ho hana tšebeletso ho bonahala ho sebetsa ho feta ho hlophisa tlhaselo ea DoS ka mokhoa oa Sybil ka litšenyehelo tse tšoanang. Mokhoa oa Sybil o kenyelletsa ho beha palo e kholo ea li-relay tsa eona marang-rang a Tor, moo liketane li ka lahloang kapa tsa fokotsoa. Ho fanoe ka tekanyetso ea tlhaselo ea 30, 5, le 3 Gbit / s, mokhoa oa Sybil o finyella phokotso ea ts'ebetso ea 32%, 7.2%, le 4.5% ea lisebelisoa tsa tlhahiso, ka ho latellana. Le ha litlhaselo tsa DoS tse reriloeng thutong li koahela li-node tsohle.

Haeba re bapisa litšenyehelo le mefuta e meng ea litlhaselo, joale ho etsa tlhaselo ea ho hlakola basebelisi ba nang le tekanyetso ea 30 Gbit / s ho tla re lumella ho fumana taolo holim'a 21% ea li-node tse kenang le 5.3% le ho finyella tšireletso ea li-node tsohle ka ketane ho 1.1% ea linyeoe. Bakeng sa lichelete tsa 5 le 3 Gbit / s, katleho e tla ba 0.06% (4.5% e kenang, 1.2% egress nodes) le 0.02% (2.8% e kenang, 0.8% egress nodes).

Source: opennet.ru

Eketsa ka tlhaloso