第二代洋葱路由匿名系统Tor的性能改进研究

发布时间：2018-11-12 18:46

【摘要】：随着互联网的迅速普及和发展,以及全球研究者对匿名和隐私安全的日益重视,匿名通信技术逐渐成为了人们所关注的焦点问题。匿名领域的研究者在保障用户身份隐私信息不被泄漏的前提之下,也需要重视匿名系统的性能。第二代洋葱路由系统(The Second Generation Onion Router,Tor)作为互联网上保护用户身份隐私信息的匿名通信系统,是当前最为流行的匿名隐私解决方案。但随着Tor用户数量的口益增加及Tor网络规模的不断壮大,人们在注重Tor匿名性的同时对其性能要求越来越高,所以本文主要对Tor的性能进行分析与评估,并提出Tor路由选择改进方案RTT-Tor和暗网中的文件断点续传方案FBC-Tor。本文首先对Tor的理论基础进行概述,分别对Tor的网络架构、缓存队列结构、洋葱单元结构、匿名原理、隐匿服务及目录服务器进行综述。然后对源码进行详细分析,研究了源码的整体架构、各个代码模块的主要功能以及模块之间的调用关系,在分析源码的基础上,我们研究了近十年来学术界提出的路由选择改进方案或建议,对当前比较典型的路由选择改进算法进行了总结。其次,我们使用仿真工具Shadow和TorPS对当前路由选择算法的性能进行了仿真评估实验,分析该算法在网络拥塞情况下存在的性能问题及匿名性问题,并针对该算法在网络拥塞情况中存在的性能问题提出了一种基于链路往返延迟的路由选择改进方案RTT-Tor,最后通过仿真实验验证了该方案带来的性能提升及可能存在的匿名性折损问题。最后,我们通过分析Tor暗网(隐匿服务)的设计原理,提出了暗网中的文件断点续传方案FBC-Tor。在该方案中,用户不仅可以在Tor暗网中进行匿名文件传输,而且在文件传输过程中,如果遇到网络瘫痪等原因导致文件传输中断,在下次成功建立连接之后,可以实现文件断点续传,即从上次文件传输中断的位置继续传输该文件。这样可以保护用户的身份隐私信息不被泄漏,提高了Tor的性能。
[Abstract]:With the rapid popularization and development of the Internet and the increasing attention paid by global researchers to anonymity and privacy security, anonymous communication technology has gradually become the focus of attention. Researchers in the field of anonymity also need to pay attention to the performance of anonymous system while protecting the privacy information of user identity from being leaked. The second generation onion routing system (The Second Generation Onion Router,Tor) is the most popular anonymous privacy solution as an anonymous communication system on the Internet to protect user identity privacy information. However, with the increasing number of Tor users and the growing scale of Tor network, people pay more and more attention to the anonymity of Tor at the same time, so this paper mainly analyzes and evaluates the performance of Tor. The improved Tor routing scheme RTT-Tor and the file breakpoint continuation scheme FBC-Tor. in dark network are also proposed. In this paper, the theoretical basis of Tor is summarized, and the network architecture, cache queue structure, onion unit structure, anonymity principle, hiding service and directory server of Tor are reviewed respectively. Then the source code is analyzed in detail, and the whole structure of the source code, the main functions of each code module and the calling relationship between the modules are studied. On the basis of analyzing the source code, In this paper, we have studied the schemes or suggestions of routing improvement proposed by academic circles in recent ten years, and summarized the current typical routing improvement algorithms. Secondly, we use the simulation tools Shadow and TorPS to evaluate the performance of the current routing algorithm, and analyze the performance problem and anonymity of the algorithm in the case of network congestion. Aiming at the performance problem of the algorithm in network congestion, an improved routing scheme based on link round trip delay (RTT-Tor,) is proposed. Finally, the simulation results show that the proposed scheme can improve the performance and the possible anonymous discount problem. Finally, by analyzing the design principle of Tor dark network (hidden service), we put forward the file breakpoint continuation scheme FBC-Tor. in the dark network. In this scheme, the user can not only transfer files anonymously in the Tor dark network, but also in the process of file transfer, after the next successful connection is established, if the file transfer is interrupted because of the network paralysis and so on. Can achieve file breakpoint continuation, that is, from the last file transfer interrupt location to continue to transfer the file. This can protect the user's identity and privacy information from disclosure, and improve the performance of Tor.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】