Karen Reilly [email protected]
Andrew Lewman [email protected] The Tor Project, Inc.
501(c)(3) non-profit organization dedicated to the research and development of technologies for online anonymity and privacy
2 / 38 AnonymousAnonymous CommunicationCommunication
People need to hide in a crowd of other people. ”Anonymity loves company.”
3 / 38 Tor serves different interests for different user groups:
Tor
4 / 38 Tor serves different interests for different user groups:
Private Citizens “It's Privacy!”
Tor
5 / 38 Tor serves different interests for different user groups:
Governments Private Citizens “It's traffic-analysis “It's Privacy!” resistance!”
Tor
6 / 38 Tor serves different interests for different user groups:
Governments Private Citizens “It's traffic-analysis “It's Privacy!” resistance!”
Tor
Businesses “It's network security!”
7 / 38 Tor serves different interests for different user groups:
Governments Private Citizens “It's traffic-analysis “It's Privacy!” resistance!”
Tor
Businesses Human Rights “It's network Activists security!” “It's reachability!”
8 / 38 WhatWhat isis Tor?Tor?
➢ Online anonymity software and network ➢ Open source, freely available ➢ 3-clause BSD licensed ➢ CC-BY-3.0 Documentation and media 9 / 38 10 / 38 WhatWhat isis Tor?Tor?
Active research environment: National Science Foundation, University of Waterloo, UMN, Georgia Tech, Princeton, UIUC, Drexel, Boston Univ, Naval Research Lab, UC-London, Indiana Univ., Univ. of Cambridge 11 / 38 WhatWhat isis Tor?Tor?
Increasingly diverse toolset: Tor, Tor Browser Bundle, Tails LiveCD, Tor Weather, Tor auto-responder, Secure Updater, Orbot, Torora, Tor Check, Arm, Nymble, Tor Control, and so on.
12 / 38 Current Projects
Knight Foundation Internews Network SRI International Broadcasting Board of Governors National Science Foundation Radio Free Asia Swedish International Development and Cooperation Agency
13 / 38 Who Uses Tor?
‣Law Enforcement ‣Abuse Victims ‣Human Rights Activists ‣Militaries ‣Business Executives ‣Normal People
14 / 38 Estimated 500k to 1 million daily users worldwide
15 / 38 16 / 38 17 / 38 18 / 38 How is Tor different?
VPNs, HTTP/HTTPS proxies, I2P, Freenet, Swarm, Retroshare, Vanish vs.
JonDos and Tor 19 / 38 AA TypicalTypical InternetInternet ConnectionConnection
Network
Alice Bob
20 / 38 Alice might be watched.
Network
Alice Bob
21 / 38 Parts of the network could be monitored.
Network
Alice Bob
22 / 38 Bob could be compromised.
Network
Alice Bob
23 / 38 HowHow isis TorTor Different?Different?
Relay Bob
Alice
24 / 38 A Basic Relay System
Relay Bob
Alice
25 / 38 An Evil Relay
Evil Relay Bob
Alice
26 / 38 An Evil Network
Relay Bob
Alice
27 / 38 HowHow TorTor WorksWorks
Alice
Entry Node Exit Node
Middle Node Bob
28 / 38 Alice connects to an Entry Node.
Alice
Entry Node Exit Node
Middle Node Bob
29 / 38 The data is routed through a Middle Node.
Alice
Entry Node Exit Node
Middle Node Bob
30 / 38 The data is routed through an Exit Node.
Alice
Entry Node Exit Node
Middle Node Bob
31 / 38 Alice's circuit to Bob is established.
Alice
Entry Node Exit Node
Middle Node Bob
32 / 38 Network Map
33 / 38 Metrics ‣ Measuring the Tor Network anonymously
‣ NSF grant for research
‣ Archive of hourly consensus, ExoneraTor, VisiTor
‣ Metrics portal:
https://metrics.torproject.org
34 / 38 Future Directions
➔ Realtime Voice and Video over Tor ➔ Greatly improving usability, security, and anonymity of Tor Browser and Tails ➔ Making Tor undetectable on the wire ➔ IPv6 compatibility ➔ Crypto upgrade ➔ Distributed Directory Authorities 35 / 38 Mobile Operating Systems
➢ Entirely new set of challenges for something designed to know where you are at all times.
➢ Orbot: Tor on Android. https://guardianproject.info/apps/
➢ Tor on iphone, maemo/meego, symbian, etc
➢ Tor on Windows CE. For example: http://www.gsmk.de
➢ Guardian Project, https://guardianproject.info/ 36 / 38 Even more info:
Visit us at https://www.torproject.org/ for more information, links, and ideas.
37 / 38 Credits and Thanks
‣ Danger!, http://flickr.com/photos/hmvh/58185411/sizes/o/ hmvh, CC-BY-SA.
‣ 500k, http://www.flickr.com/photos/lukaskracic/334850378/sizes/l/ Luka Skracic, used with permission.
‣ Illustration and Design: J.M.Todaro – http://jmtodaro.com
38 / 38