一种新型匿名网络结构的设计  

DESIGN OF A NEW ANONYMOUS NETWORK STRUCTURE

作　　者：刘昊[1] 王勇军[1] Liu Hao;Wang Yongjun(College of Computer,National University of Defense Technology,Changsha 410073,Hunan,China)

机构地区：[1]国防科技大学计算机学院,湖南长沙410073

出　　处：《计算机应用与软件》2022年第6期315-321,328,共8页Computer Applications and Software

基　　金：国家自然科学基金项目(61472439);国家重点研发计划项目(2018YFB0204301)。

摘　　要：传统TOR匿名网络如今面临着出口节点无保护、单点失效、低成本流量攻击、低资源路由攻击等各种攻击问题的威胁,对此提出一种新型匿名网络结构。新型匿名网络在出入口节点间加入非对称加密处理,并设置分组目录服务器机制,修改中继路由节点的组织形式。这些方法可以有效保护出口段通信安全,从原理上缓解上述问题。实验通过反复模拟志愿中继节点在分组目录服务器机制下的注册过程,系统评估新型匿名网络对于两种攻击的抵御能力。结果表明,新型匿名网络可以有效提升低成本流量攻击的攻击成本,降低其攻击成功的概率,并将低资源路由攻击的成本提升至2.67倍以上。The traditional TOR anonymous network faces with the threats of unsecured exit node,single point failure,low-cost traffic attack,low-resource routing attack,etc.This paper proposes a new anonymous network structure.The new anonymous network added a symmetric encryption between entry and exit nodes,set up grouping directory server mechanism,and modified the organization form of relay routing nodes.These methods effectively protected the communication security of exit part and alleviated the above problems in principle.By repeatedly simulating the registration process of volunteer relay nodes under the mechanism of grouping directory server,the system evaluated the resistance of the new anonymous network to two kinds of attacks.The results show that the new anonymous network can effectively increase the attack cost of low-cost traffic attack,reduce the probability of successful attack,and increase the cost of low-resource routing attack by at least 2.67 times.

关 键 词：匿名通信 洋葱网络 洋葱路由 TOR 网络结构 目录服务器 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]