Modular: support customized networking task.

We try to provide some insights on the effect of DNS on Tor’s anonymity and security by identifying the DNS resolvers and investigating DNSSEC deployment of Tor exit relays. We are also interested in the effect of DNS on exit relay: In this case, we want to expose malicious exit relays engaging in man-in-the-middle attacks including SSL/TLS-based attacks, DNS poisoning and traffic sniffing. So, we define a malicious exit relay is to: On top of that, DNS requests and responses are also heavily reliant on exit relays for resolution and validation, which raises potential concerns regarding centralization and misconfiguration. by design, exit relays almost control the whole Tor network traffic on top of TCP connections, in which situation exit relays are easily targeted to snoop and tamper with sensitive network traffic. It implements this by using a nested so-called “onion” encryption to encrypts traffic data and hide the source IP/ destination IP as well as randomly building the three-hop circuits.Īs shown in the figure above. To start with, Tor is a popular low-latency anonymous communication network for enhancing privacy. To be honest, I didn’t expect much that we would find some valuable results in the first place considering the time limit, however, we did eventually get some interesting conclusions! Based on an existing Tor scanner, we customize and develop our own modules to implement probing all exit relays of the whole Tor network. In this project, we attempt to monitor and analysis Tor exit relays by detecting the malicious exit relays and looking into the DNS resolution. In the past few weeks, I have been working on a subject project. Tor Network: Malicious Exit Relay and DNS Resolution

Standalone treesize free download