{"id":37276,"date":"2019-10-31T22:16:42","date_gmt":"2019-10-31T19:16:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor\/"},"modified":"2019-10-31T22:16:42","modified_gmt":"2019-10-31T19:16:42","slug":"dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","title":{"rendered":"DoS-attacker f\u00f6r att minska prestandan p\u00e5 Tor-n\u00e4tverket","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>En grupp forskare fr\u00e5n Georgetown University och den amerikanska flottans forskningslaboratorium <noindex><a rel=\"nofollow\" href=\"https:\/\/www.usenix.org\/system\/files\/sec19-jansen.pdf\">har analyserat<\/a><\/noindex> resistensen hos det anonyma n\u00e4tverket Tor mot attacker som leder till \u00f6verbelastning (DoS). Forskning om kompromettering av Tor-n\u00e4tverket handlar fr\u00e4mst om censur (blockering av tillg\u00e5ng till Tor), identifiering av beg\u00e4rningar genom Tor i transittrafik och analys av korrelationen av trafikfl\u00f6den innan ing\u00e5ngsnoden och efter utg\u00e5ngsnoden f\u00f6r att de-anonymisera anv\u00e4ndare. Den presenterade studien visar att organisationen av DoS-attacker mot Tor ofta f\u00f6rbises och att det, med kostnader p\u00e5 n\u00e5gra tusen dollar per m\u00e5nad, \u00e4r helt m\u00f6jligt att skapa f\u00f6rh\u00e5llanden som kan st\u00f6ra Tor:s normala funktion och f\u00e5 anv\u00e4ndare att sluta anv\u00e4nda Tor p\u00e5 grund av d\u00e5lig prestanda.<\/p>\n<p>Forskarna f\u00f6resl\u00e5r tre scenarier f\u00f6r genomf\u00f6rande av DoS-attacker: skapa flaskhalsar mellan broknytar, obalansera belastningen och skapa flaskhalsar mellan rel\u00e4er, vilket kr\u00e4ver att angriparen har en bandbredd p\u00e5 30, 5 och 3 Gbit\/s. I monet\u00e4ra termer kommer kostnaden f\u00f6r att genomf\u00f6ra en attack under en m\u00e5nad att uppg\u00e5 till 17, 2.8 och 1.6 tusen dollar, respektive. F\u00f6r j\u00e4mf\u00f6relse, att utf\u00f6ra en DDoS-attack rakt p\u00e5 mot att st\u00f6ra Tor, skulle kr\u00e4va en bandbredd p\u00e5 512.73 Gbit\/s och kosta 7.2 miljoner dollar per m\u00e5nad.<\/p>\n<p>Den f\u00f6rsta metoden, med en kostnad p\u00e5 17 tusen dollar per m\u00e5nad, genom att \u00f6verbelasta ett begr\u00e4nsat antal broknytar med en intensitet p\u00e5 30 Gbit\/s, skulle minska laddningshastigheten f\u00f6r data fr\u00e5n klienterna med 44%. Under testerna f\u00f6rblev endast 12 obfs4-broknytar aktiva av 38 (de ing\u00e5r inte i offentliga kataloger och anv\u00e4nds f\u00f6r att kringg\u00e5 blockeringen av vakt-punkter), vilket g\u00f6r det m\u00f6jligt att selektivt \u00f6verbelasta de \u00e5terst\u00e5ende aktiva broknytarna. Tor-utvecklarna kan f\u00f6rdubbla kostnaderna f\u00f6r underh\u00e5ll och \u00e5terst\u00e4lla driften av saknade noder, men angriparen beh\u00f6ver endast \u00f6ka sina kostnader till 31 tusen dollar per m\u00e5nad f\u00f6r att attackera alla 38 broknytar. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sv\/server\/\"   title=\"servrar\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1351\">servrar<\/a> pengar.<\/p>\n<p>Den andra metoden, som kr\u00e4ver 5 Gbit\/s f\u00f6r attacken, \u00e4r baserad p\u00e5 att st\u00f6ra den centraliserade systemet f\u00f6r m\u00e4tning av bandbredd, TorFlow, vilket g\u00f6r att den genomsnittliga hastigheten f\u00f6r data\u00f6verf\u00f6ring av kunderna minskar med 80 %. TorFlow anv\u00e4nds f\u00f6r att balansera belastningen, vilket g\u00f6r det m\u00f6jligt att st\u00f6ra trafikf\u00f6rdelningen inom attacken och organisera den genom ett begr\u00e4nsat antal servrar, vilket orsakar deras \u00f6verbelastning.<\/p>\n<p>Den tredje metoden, som endast kr\u00e4ver 3 Gbit\/s, \u00e4r baserad p\u00e5 anv\u00e4ndningen av en modifierad Tor-klient f\u00f6r att skapa parasitisk belastning, vilket g\u00f6r att hastigheten f\u00f6r kundernas nedladdningar minskar med 47 % till en kostnad av 1.6 tusen dollar per m\u00e5nad. Vid en \u00f6kning av kostnaderna f\u00f6r attacken till 6.3 tusen dollar kan hastighetsminskningen f\u00f6r kundernas nedladdningar uppg\u00e5 till 120 %. Den modifierade klienten anv\u00e4nder ist\u00e4llet f\u00f6r den standardm\u00e4ssiga kedjan av tre noder (ing\u00e5ng, mellanliggande och utg\u00e5ngsnod) en kedja av \u00e5tta noder med ett maximalt antal hopp mellan noderna, efter vilket den beg\u00e4r nedladdning av stora filer och pausar l\u00e4sningsoperationer efter att ha skickat f\u00f6rfr\u00e5gningar, men forts\u00e4tter att skicka kommandon SENDME som instruerar ing\u00e5ngsnoderna att forts\u00e4tta data\u00f6verf\u00f6ringen. <\/p>\n<p>Det p\u00e5pekas att initiering av \u00f6verbelastningsattacken \u00e4r betydligt mer effektiv \u00e4n att organisera en DoS-attack med Sybil-metoden vid liknande kostnader. Sybil-metoden inneb\u00e4r att ett stort antal egna rel\u00e4er placeras i Tor-n\u00e4tverket, d\u00e4r kedjor kan sl\u00e4ppas eller bandbredden kan begr\u00e4nsas. Vid en budget f\u00f6r attacken p\u00e5 30, 5 och 3 Gbit\/s g\u00f6r Sybil-metoden det m\u00f6jligt att uppn\u00e5 en minskning av prestandan f\u00f6r 32 %, 7.2 % och 4.5 % av utg\u00e5ngsnoderna, respektive. Samtidigt omfattar de f\u00f6reslagna DoS-attackerna inom studien alla noder.<\/p>\n<p>Om man j\u00e4mf\u00f6r kostnaderna med andra typer av attacker, skulle genomf\u00f6randet av en attack f\u00f6r att de-anonymisera anv\u00e4ndare med en budget p\u00e5 30 Gbit\/s resultera i kontroll \u00f6ver 21 % av ing\u00e5ngsnoderna och 5.3 % av utg\u00e5ngsnoderna samt ett omfattande av alla noder i 1.1 % av fallen. F\u00f6r budgetarna 5 och 3 Gbit\/s blir effektiviteten 0.06 % (4.5 % av ing\u00e5ngsnoderna, 1.2 % av utg\u00e5ngsnoderna) respektive 0.02 % (2.8 % av ing\u00e5ngsnoderna, 0.8 % av utg\u00e5ngsnoderna).<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>K\u00e4lla: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51309\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0414\u0436\u043e\u0440\u0434\u0436\u0442\u0430\u0443\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0412\u041c\u0421 \u0421\u0428\u0410 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0441\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Tor \u043a \u0430\u0442\u0430\u043a\u0430\u043c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u043c \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 Tor \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u0442\u0440\u043e\u044f\u0442\u0441\u044f \u0432\u043e\u043a\u0440\u0443\u0433 \u0446\u0435\u043d\u0437\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a Tor), \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 Tor \u0432 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u0435 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u0440\u0440\u0435\u043b\u044f\u0446\u0438\u0438 \u043f\u043e\u0442\u043e\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0435\u0440\u0435\u0434 \u0432\u0445\u043e\u0434\u043d\u044b\u043c \u0443\u0437\u043b\u043e\u043c \u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u043e\u0433\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37276","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0414\u0436\u043e\u0440\u0434\u0436\u0442\u0430\u0443\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0412\u041c\u0421 \u0421\u0428\u0410 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sv\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sv_SE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47DoS-\u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0438 Tor | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0414\u0436\u043e\u0440\u0434\u0436\u0442\u0430\u0443\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0412\u041c\u0421 \u0421\u0428\u0410 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sv\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:16:42+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:16:42+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47DoS-attacker f\u00f6r att s\u00e4nka prestandan i Tor-n\u00e4tverket | ProHoster","description":"En grupp forskare fr\u00e5n Georgetown University och US Navy Research Laboratory har analyserat.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DoS-\u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0438 Tor | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0414\u0436\u043e\u0440\u0434\u0436\u0442\u0430\u0443\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u0412\u041c\u0421 \u0421\u0428\u0410 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/dos-ataki-dlya-snizheniya-proizvoditelnosti-seti-tor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:42+00:00","article:modified_time":"2019-10-31T19:16:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37276","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:59:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:30:00","updated":"2026-02-09 17:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/37276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=37276"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/37276\/revisions"}],"predecessor-version":[{"id":158595,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/37276\/revisions\/158595"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=37276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=37276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=37276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}