抗DDos攻击的Tor匿名通信安全性增强研究

发布时间：2018-04-13 20:19

本文选题：Tor(The + Second　；参考：《兰州理工大学》2017年硕士论文

【摘要】：随着网络技术的普及与发展,互联网作为通信与信息传播的工具广泛被人们所接受。与此同时,安全与隐私逐步成为互联网的一个急需解决的关键问题。目前常用的网络协议有HTTP协议、TCP/IP协议等,它们均是对外开放的,窃听者可以截获正在通信的数据包并且很容易地获得通信双方的IP地址,从而可以进一步的推断出用户的身份。为了保障用户在网络通信时的隐私性及安全性,匿名通信技术应运而生。Tor系统是当前匿名通信领域中应用最为普遍的一种匿名通信系统,它是在第一代洋葱路由技术的基础上发展而来。Tor系统具有传播时延低、传输内容机密性高、通信信道安全性高等优点,被广泛应用于Web匿名浏览、即时通信等领域。本文详细介绍了Tor系统的组成,Tor节点的加入过程以及Tor链路的建立过程,详细的分析了整个Tor系统的拓扑结构,并论述了Tor系统为降低传输时延从而破坏了自己原有的匿名性,OR节点在加入到Tor网络的过程中缺乏相应的认证机制,从而导致其极易遭受DDos攻击的问题。针对Tor系统存在DDos攻击威胁这一问题本文采用了一种基于身份的签密体制的并发签名方案,该方案对Tor节点的接入进行可靠性验证,在中间志愿节点(OR)加入到Tor网络阶段通过节点双方以及任意第三方的相互验证来确保节点身份的高度可靠性,在一定程度上排除了虚假节点,并使用签密技术来保证验证过程中认证信息的不可伪造性,从而更好的提高了Tor网络的安全性并且执行效率也有了明显的提高。最后,为验证本文所采用的方案可以有效的减小Tor系统中插入虚假节点合谋发起DDos攻击的概率,本文对该方案的公开可验性进行了证明并与目前已有方案进行了对比,可知本文所采用的方案在性能和效率上都具有优势。
[Abstract]:With the popularization and development of network technology, the Internet is widely accepted as a communication and information dissemination tool.At the same time, security and privacy have gradually become a critical problem in the Internet.At present, the commonly used network protocols include HTTP protocol and TCP / IP protocol, which are all open to the public. Eavesdroppers can intercept the packets being communicated and easily obtain the IP addresses of both sides of the communication, so that the identity of the users can be further inferred.In order to ensure the privacy and security of users in network communication, anonymous communication technology emerges as the times require. Tor system is one of the most common anonymous communication systems in the field of anonymous communication.Based on the first generation onion routing technology, Tor system has the advantages of low propagation delay, high content confidentiality and high communication channel security. It has been widely used in Web anonymous browsing, instant messaging and other fields.In this paper, the process of adding Tor nodes and the establishment of Tor links are introduced in detail. The topology of the whole Tor system is analyzed in detail.It is also discussed that in order to reduce the transmission delay and destroy the original anonymous OR node in Tor system, the authentication mechanism is lacking in the process of joining the Tor network, which leads to the problem that the Tor system is vulnerable to DDos attack.In order to solve the problem of DDos attack threat in Tor system, this paper adopts a concurrent signature scheme based on identity signcryption system, which verifies the reliability of Tor access.In the middle volunteer node (Orr) join to the Tor network stage to ensure the high reliability of the node identity through the mutual verification of the two nodes and any third party, to a certain extent, the false node is eliminated.The signcryption technology is used to ensure the unforgeability of authentication information in the verification process, which improves the security of Tor network and the efficiency of execution.Finally, in order to verify that the proposed scheme can effectively reduce the probability of inserting false nodes to launch DDos attacks in Tor system, this paper proves the open verifiability of the scheme and compares it with the existing schemes.It is known that the scheme adopted in this paper has advantages in performance and efficiency.
【学位授予单位】：兰州理工大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】