add site
services
publishers
database
health videos
toolbar
stats
live show
health store
more stuff
JOIN/LOGIN
| advertise add site services publishers database health videos
| | about toolbar stats live show health store more stuff JOIN/LOGIN |
Join Our Network | Join Our network surgeryplanet.com | Interactive Care Network | Interactive Care Network | Care, Hospital,... icarenetwork.com | Treatment Privacy and Anonymity therenewedhopecenter.com | MountainStar Physicians | MountainStar Medical Group - Primary Care and... mountainstarphysicians.co... |
The Onion Router (Tor) is a free software implementation of second-generation onion routing enabling Internet anonymity by thwarting network traffic analysis. Roger Dingledine, Nick Mathewson, and Paul Syverson presented "Tor: The Second-Generation Onion Router" at the 13th USENIX Security Symposium on Friday, August 13, 2004.[5] Tor employs cryptography in a multi-layered manner (hence the Onion routing analogy), ensuring perfect forward secrecy between routers.[citation needed] A user of the Tor network runs a proxy server on his computer. Internet-facing software can then access Tor through a SOCKS interface. Once inside a Tor network, the traffic is sent from router to router, the Tor software periodically negotiating a virtual circuit through the Tor network, ultimately reaching an exit node at which point the cleartext packet is forwarded on to its original destination. Viewed from the destination, the traffic appears to originate at the Tor exit node. Tor cannot and does not attempt to protect against monitoring of traffic at the boundaries of the Tor network, i.e., the traffic entering and exiting the network.[6] The United States government, for example, has the capability to monitor any broadband Internet traffic using devices mandated by the Communications Assistance For Law Enforcement Act (CALEA) and can therefore monitor both ends of a US-based Tor connection. While Tor does provide protection against traffic analysis, it cannot prevent traffic confirmation (also called end-to-end correlation).[6] Originally sponsored by the US Naval Research Laboratory, Tor became an Electronic Frontier Foundation (EFF) project in late 2004 and the EFF supported Tor financially until November 2005.[7] Tor software is now developed by the Tor Project, which since December 2006 is a 501(c)(3) research/education non-profit organization based in the United States of America that receives a diverse base of financial support.[1][7][8]
[edit] OperationTor aims to conceal its users' identity and their network activity from traffic analysis. Operators of the system operate an overlay network of onion routers which provides anonymity in network location as well as anonymous hidden services. [edit] Originating trafficUsers of a Tor network run an onion proxy on their machine. The Tor software periodically negotiates a virtual circuit through the Tor network. Tor employs cryptography in a multi-layered manner (hence the Onion routing analogy), ensuring perfect forward secrecy between routers. At the same time, the onion proxy software presents a SOCKS interface to its clients. SOCKS-aware applications may be pointed at Tor, which then multiplexes the traffic through a Tor virtual circuit. Once inside a Tor network, the traffic is sent from router to router, ultimately reaching an exit node at which point the cleartext packet is available and is forwarded on to its original destination. Viewed from the destination, the traffic appears to originate at the Tor exit node. Tor's application independence sets it apart from most other anonymity networks: it works at the Transmission Control Protocol (TCP) stream level. Applications whose traffic is commonly anonymised using Tor include Internet Relay Chat (IRC), instant messaging and World Wide Web browsing. When browsing the Web, Tor is often coupled with Privoxy – a filtering proxy server – that aims to add privacy at the application layer. [edit] Hidden servicesTor can also provide anonymity to servers in the form of location-hidden services, which are Tor clients or relays running specially configured server software. Rather than revealing the server's IP address (and therefore its network location), hidden services are accessed through Tor-specific Hidden services have been deployed on the Tor network beginning in 2004.[10] Other than the database that stores the hidden-service descriptors,[11] Tor is decentralized by design; there is no direct readable list of hidden services. There are a number of independent hidden services that serve this purpose. Because location-hidden services do not use exit nodes, they are not subject to exit node eavesdropping. There are, however, a number of security issues involving Tor hidden services. For example, services that are reachable through Tor hidden services and the public Internet are susceptible to correlation attacks and thus not perfectly hidden. Other pitfalls include misconfigured services (e.g. identifying information included by default in web server error responses),[9] uptime and downtime statistics, intersection attacks and user error. [edit] Weaknesses[edit] DNS leaksAs with many anonymous web surfing systems, direct Domain Name System (DNS) requests are usually still performed by many applications, without using a Tor proxy. Using Privoxy or the command "torify" included with a Tor distribution is a possible solution to this problem.[12] Additionally, applications using SOCKS5 – which supports name-based proxy requests – can route DNS requests through Tor, having lookups performed at the exit node and thus receiving the same anonymity as other Tor traffic.[13] As of Tor release 0.2.0.1-alpha, Tor includes its own DNS resolver which will dispatch queries over the mix network. This should close the DNS leak and can interact with Tor's address mapping facilities to provide the Tor hidden service ( [edit] Traffic analysisLike all current low latency anonymity networks, Tor is vulnerable to traffic analysis from observers who can watch both ends of a user's connection.[15] Steven J. Murdoch and George Danezis from University of Cambridge presented an article[16] at the 2005 IEEE Symposium on Security and Privacy on traffic-analysis techniques that allow adversaries with only a partial view of the network to infer which nodes are being used to relay the anonymous streams. These techniques greatly reduce the anonymity provided by Tor. Murdoch and Danezis have also shown that otherwise unrelated streams can be linked back to the same initiator. However, this attack fails to reveal the identity of the original user.[16] Murdoch has been working with and funded by Tor since 2006. [edit] Eavesdropping by exit nodesIn September 2007, Dan Egerstad, a Swedish security consultant, revealed that by operating and monitoring Tor exit nodes he had intercepted usernames and passwords for a large number of email accounts.[17] As Tor does not, and by design cannot, encrypt the traffic between an exit node and the target server, any exit node is in a position to capture any traffic passing through it which does not use end-to-end encryption, e.g. SSL. While this does not inherently violate the anonymity of the source, it affords added opportunities for data interception by self-selected third parties, greatly increasing the risk of exposure of sensitive data by users who are careless or who mistake Tor's anonymity for security.[18] [edit] EtiquetteBecause of its inherent anonymity, the traditional practices that network operators use to curb abuse may be insufficient with regard to connections coming from a Tor network. Tor has some features intended to reduce this problem, both from the perspective of exit node operators and third party sites. Exit nodes each maintain an exit policy of what traffic is and is not permitted to leave Tor network through that node. It is possible to prevent most major abuses of Tor network using a combination of addresses and ports. Potential abuses include:
[edit] Illegal usesThe Tor network can be used for purposes that are illegal in some jurisdictions, such as criticizing leaders of state, sharing copyrighted files and distributing child pornography.[19][20][21] In September 2006, German authorities seized data center equipment running Tor software during a child pornography crackdown.[20][22][23] The Tor project's response to accusations that it is helping to facilitate illegal activity has been to emphasize that (1) many law-abiding individuals who use Tor for "good" purposes (privacy, freedom of communication) do not have readily available and practical alternatives to Tor, while (2) those who are willing to break laws already have other more effective ways to remain anonymous (such as breaking into computers, renting botnets, or stealing cell phones).[24] The argument is that the benefit to those in group (1) is much larger than the assistance to those in group (2), who have realistic alternatives to Tor by virtue of the fact that they are willing to break the law. [edit] Implementation
[edit] See also
[edit] Footnotes
[edit] References
[edit] Further reading
[edit] External links
| |||||||||||||||||||||||
| ↑ top of page ↑ | about thumbshots |
