Evading Censorship with Browser-Based Proxies

详细信息    查看全文

• 作者：David Fifield (18)
  Nate Hardison (18)
  Jonathan Ellithorpe (18)
  Emily Stark (19)
  Dan Boneh (18)
  Roger Dingledine (20)
  Phil Porras (21)
  
• 刊名：Lecture Notes in Computer Science
• 出版年：2012
• 出版时间：2012
• 年：2012
• 卷：7384
• 期：1
• 页码：259-278
• 全文大小：366KB
• 参考文献：1. The OpenNet Initiative: OpenNet Initiative Internet censorship data (2011), http://opennet.net/research/data
  2. Dingledine, R., Mathewson, N., Syverson, P.: Tor: The second-generation onion router. In: Proceedings of the 13th USENIX Security Symposium (August 2004)
  3. Wustrow, E., Wolchok, S., Goldberg, I., Halderman, J.A.: Telex: Anticensorship in the network infrastructure. In: Proc. 20th USENIX Security Symposium (2011)
  4. Ultrareach Internet Corp.: Ultrasurf proxy, http://www.ultrasurf.us/
  5. Dingledine, R., Mathewson, N.: Design of a blocking-resistant anonymity system. Technical Report 2006-1, The Tor Project (November 2006)
  6. Kadianakis, G., Mathewson, N.: Obfsproxy architecture (2011), https://www.torproject.org/projects/obfsproxy
  7. Weinberg, Z., Wang, J., Yegneswaran, V., Briesemeister, L., Boneh, D., Wang, F. (StegoTorus: A camouflage proxy for the Tor anonymity system)
  8. Tor Metrics Portal: Users (2011), https://metrics.torproject.org/users.html
  9. Lewman, A.: Tor partially blocked in China (September 2009), https://blog.torproject.org/blog/tor-partially-blocked-china
  10. McLachlan, J., Hopper, N.: On the risks of serving whenever you surf: Vulnerabilities in Tor鈥檚 blocking resistance design. In: Proceedings of the Workshop on Privacy in the Electronic Society (WPES 2009). ACM (November 2009)
  11. Wilde, T.: Knock knock knockin鈥?on bridges鈥?doors (January 2012), https://blog.torproject.org/blog/knock-knock-knockin-bridges-doors
  12. Winter, P., Lindskog, S.: How China is blocking Tor. Technical report, Karlstad University (April 2012)
  13. Appelbaum, J., Mathewson, N.: Pluggable transports for circumvention (October 2010), https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/180-pluggable-transport.txt
  14. W3C: Cross-origin resource sharing (April 2012), http://www.w3.org/TR/cors/
  15. Adobe Systems Incorporated: Adobe Flash Player 9 security (July 2008), http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/flashplayer/pdfs/flash_player_9_security.pdf
  16. Tor Metrics Portal: Time in seconds to complete 5 MiB request (2012), https://metrics.torproject.org/performance.html
  17. Loesing, K.: torperf measurements-HOWTO (2011), https://gitweb.torproject.org/torperf.git/blob_plain/HEAD:/measurements-HOWTO
  18. Arlitt, M.F., Williamson, C.L.: Internet web servers: workload characterization and performance implications. IEEE/ACM Transactions on Networking聽5 (October 1997)
  19. Paxson, V., Floyd, S.: Wide area traffic: the failure of Poisson modeling. IEEE/ACM Trans. Netw.聽3, 226鈥?44 (1995) CrossRef
  20. Little, J.D.C.: A proof of the queuing formula L = / 位W (1960)
  21. Rosenberg, J., Mahy, R., Matthews, P., Wing, D.: Session Traversal Utilities for NAT (STUN). RFC 5389 (Proposed Standard) (October 2008)
  22. Adobe Systems Incorporated: Real Time Media Flow Protocol (October 2008), http://labs.adobe.com/technologies/cirrus/
  23. M眉ller, A., Evans, N., Grothoff, C., Kamkar, S.: Autonomous NAT traversal. In: 10th IEEE International Conference on Peer-to-Peer Computing (P2P) (2010)
  24. W3C: WebRTC 1.0: Real-time communication between browsers (January 2012), http://dev.w3.org/2011/webrtc/editor/webrtc.html
  25. Lynn, B.: PBC library, http://crypto.stanford.edu/pbc/
  26. Feamster, N., Balazinska, M., Harfst, G., Balakrishnan, H., Karger, D.: Infranet: Circumventing web censorship and surveillance. In: Proceedings of the 11th USENIX Security Symposium (2002)
  
• 作者单位：David Fifield (18)
  Nate Hardison (18)
  Jonathan Ellithorpe (18)
  Emily Stark (19)
  Dan Boneh (18)
  Roger Dingledine (20)
  Phil Porras (21)
  
  18. Stanford University, USA
  19. Massachusetts Institute of Technology, USA
  20. The Tor Project, USA
  21. SRI International, USA
  

文摘

While Internet access to certain sites is blocked in some parts of the world, these restrictions are often circumvented using proxies outside the censored region. Often these proxies are blocked as soon as they are discovered. In this paper we propose a browser-based proxy creation system that generates a large number of short-lived proxies. Clients using the system seamlessly hop from one proxy to the next as these browser-based proxies appear and disappear. We discuss a number of technical challenges that had to be overcome for this system to work and report on its performance and security. We show that browser-based short-lived proxies provide adequate bandwidth for video delivery and argue that blocking them can be challenging.