Thesis F Free Secure Network Systems Group (B.Sc

Total Page：16

File Type：pdf, Size：1020Kb

Technische Universität München Lehrstuhl für Netzarchitekturen und Netzdienste Thesis f Free Secure Network Systems Group (B.Sc. / SEP) P2P NAT Traversal with SMTP and IMAP GNUnet is a framework for secure peer-to-peer networking that does not use any centralized or Motivation otherwise trusted services. Robustness and availability are two of GNUnet's main design goals and GNUnet tries to ensure connectivity by encapsulating traffic in common network protocols. GNUnet is one of the few peer-to-peer networking frameworks providing more than one way of f exchanging data between peers. GNUnet is currently able to use TCP, UDP, HTTP and HTTPS to transfer data between peers. Many users on the Internet only have limited network connectivity, restricted by firewalls or filtering appliances in company networks or NAT boxes at home. These users are limited in establishing outbound connections using certain protocols or unable to accept inbound connections from the Internet. We want to provide communication for users in such environments. E-Mail is a service available for most users even in Your Task restricted networks. When normal network traffic is filtered, GNUnet could use SMTP and IMAP to transmit data through firewalls by redirecting the data as a normal e-mail over an outside mailbox. Restricted peers can receive data via the mailbox and reply by sending an e-mail even when located behind a firewall or NAT box. Your task is to implement this approach using established e-mail protocols, existing C libraries and the GNUnet framework. Performance will be the key challenge for this work since SMTP and IMAP typically have high latencies + and are rather verbose. For the thesis, you will have to evaluate your implementation and characterize bottlenecks. + We offer you the possibility to work in a creative environment with motivated supervision. You will Your Benefits learn a lot about development processes in a team, e-mail protocols like SMTP(S) and IMAP(S), performance, networking and the GNUnet peer-to-peer framework and significantly improve your software development skills. And since we are an official GNU package you have the chance to participate actively in the development of free software! To succeed in this challenge you should have: Requirements • Knowledge in Linux • C/C++ programming skills and experience with related development tools • Interest in network technologies Matthias Wachs [email protected] Contact: http://www.net.in.tum.de/en/members/ http://gnunet.org/fsnsg/.

Copy Link

Recommended publications

IPFS and Friends: a Qualitative Comparison of Next Generation Peer-To-Peer Data Networks Erik Daniel and Florian Tschorsch
1 IPFS and Friends: A Qualitative Comparison of Next Generation Peer-to-Peer Data Networks Erik Daniel and Florian Tschorsch Abstract—Decentralized, distributed storage offers a way to types of files [1]. Napster and Gnutella marked the beginning reduce the impact of data silos as often fostered by centralized and were followed by many other P2P networks focusing on cloud storage. While the intentions of this trend are not new, the specialized application areas or novel network structures. For topic gained traction due to technological advancements, most notably blockchain networks. As a consequence, we observe that example, Freenet [2] realizes anonymous storage and retrieval. a new generation of peer-to-peer data networks emerges. In this Chord [3], CAN [4], and Pastry [5] provide protocols to survey paper, we therefore provide a technical overview of the maintain a structured overlay network topology. In particular, next generation data networks. We use select data networks to BitTorrent [6] received a lot of attention from both users and introduce general concepts and to emphasize new developments. the research community. BitTorrent introduced an incentive Specifically, we provide a deeper outline of the Interplanetary File System and a general overview of Swarm, the Hypercore Pro- mechanism to achieve Pareto efficiency, trying to improve tocol, SAFE, Storj, and Arweave. We identify common building network utilization achieving a higher level of robustness. We blocks and provide a qualitative comparison. From the overview, consider networks such as Napster, Gnutella, Freenet, BitTor- we derive future challenges and research goals concerning data rent, and many more as first generation P2P data networks, networks.
[Show full text]
A Transport Layer Abstraction for Peer-To-Peer Networks Ronaldo A
A Transport Layer Abstraction for Peer-to-Peer Networks Ronaldo A. Ferreira, Christian Grothoff and Paul Ruth Department of Computer Sciences Purdue University g frf,grothoff,ruth @cs.purdue.edu http://www.gnu.org/software/GNUnet/ B Abstract— The initially unrestricted host-to-host communica- same peer-to-peer network. In fact, two peers A and may tion model provided by the Internet Protocol has deteriorated want to use differentmodes of communicationon the same link. due to political and technical changes caused by Internet growth. For example, suppose node B is behind a NAT box and cannot While this is not a problem for most client-server applications, peer-to-peer networks frequently struggle with peers that are be reached directly via UDP or TCP. In a system with multiple only partially reachable. We describe how a peer-to-peer frame- transport protocols, A could initiate a connection by sending an B A work can hide diversity and obstacles in the underlying Internet e-mail to B (SMTP) and then have contact via TCP, al- and provide peer-to-peer applications with abstractions that hide lowing A to continue further communication on a bidirectional transport speciﬁc details. We present the details of an implemen- TCP connection. tation of a transport service based on SMTP. Small-scale bench- marks are used to compare transport services over UDP, TCP, and We will use GNUnet as our reference peer-to-peer system, SMTP. but it should be clear that the idea of a transport abstraction can be applied to other systems. GNUnet is a peer-to-peer frame- work whose main focus is on security [1], [5].
[Show full text]
Recognition and Investigation of Listening in Anonymous Communication Systems 1 K
AEGAEUM JOURNAL ISSN NO: 0776-3808 Recognition and investigation of listening in anonymous communication systems 1 K. Balasubramanian, 2 Dr. S. Kannan, 3 S. Sharmila 1Associate Professor, Department of CSE, E.G.S Pillay Engineering College, Nagapattinam, Tamil Nadu, India. Email: [email protected] 2, Professor, Department of CSE, E.G.S Pillay Engineering College, Nagapattinam, Tamil Nadu, India. 3, P.G Student, Department of CSE, E.G.S Pillay Engineering College, Nagapattinam, Tamil Nadu, India. Abstract components through which client activity is steered can Mysterious correspondence systems similar to listen in and get delicate information, for example, user Tor, mostly secure the secrecy of client activity by verification qualifications. This circumstance can scrambling all interchanges inside the overlay system. conceivably decline when clients utilize intermediary based frameworks to get to similar administrations However, when the transferred activity achieves the without utilizing end-to-end encryption, as the quantity limits of the system, toward its end, the first client of hosts or hubs that can listen stealthily on their activity is definitely presented to the last node on the movement increments. Different open and private path. Accordingly, users sending sensitive information, systems may square access to interpersonal interaction similar to verification accreditations, over such and other prominent online administrations for systems, risk having their information between different reasons. Under these conditions, users accepted and uncovered, unless end-to-end encryption regularly depend on utilizing disseminated proxying frameworks to prevent their activity from being is utilized. Listening can be performed by malicious or filtered. They fall back on such mechanisms so as to compromised relay nodes, and additionally any rebel evade system activity filtering in light of source, goal, arrange substance on the way toward the actual end.
[Show full text]
Tools for Breaking out of PRISM
Tools for Breaking out of PRISM Christian Grothoff The GNUnet Project \Never doubt your ability to change the world." {Glenn Greenwald Everybody Has Secrets I Business & Trade Secrets I Political opinions I Illegal activities Send everything to US in plaintext Keeping Secrets I Encryption: baseline I Hide meta-data: state of the art I Practice today? Keeping Secrets I Encryption: baseline I Hide meta-data: state of the art I Practice today? Send everything to US in plaintext I PRISM enables real-time surveillance and access to stored content I Data collected: E-mails, instant messages, videos, photos, stored data (likely files), voice chats, file transfers, video conferences, log-in times, and social network profiles I Tiny part of NSA: $20 M budget I Guardian: \The PRISM program allows the intelligence services direct access to the companies servers." I Cooperating providers: Microsoft, Yahoo, Google, Facebook, PalTalk, YouTube, Skype, AOL, Apple I Guardian: \The PRISM program allows the intelligence services direct access to the companies servers." I Cooperating providers: Microsoft, Yahoo, Google, Facebook, PalTalk, YouTube, Skype, AOL, Apple I PRISM enables real-time surveillance and access to stored content I Data collected: E-mails, instant messages, videos, photos, stored data (likely files), voice chats, file transfers, video conferences, log-in times, and social network profiles I Tiny part of NSA: $20 M budget US discussion focuses on spying on US citizens and legality under US law. Frank Church (D-Idaho): \The NSA's capability at any
[Show full text]
Censorship-Resistant Collaboration with a Hybrid DTN/P2P Network
Censorship-resistant Collaboration with a Hybrid DTN/P2P Network Masterarbeit von Philipp Hagemeister aus Braunschweig vorgelegt am Lehrstuhl fur¨ Rechnernetze und Kommunikationssysteme Prof. Dr. Martin Mauve Heinrich-Heine-Universitat¨ Dusseldorf¨ Marz¨ 2012 Acknowledgments My thanks go to Marc Fontaine for asking stupid questions that turned out to be quite clever, and for pointing out that correctness is essential both in the real and the physical world. I also thank Paul Baade for demanding impossible features which turned out to be the last piece in the puzzle. Julius Rommler¨ has notiﬁed me of orthographical, typographical, and (inadvertently) semantical er- rors. And told me to use fewer big words. Thanks! I wish to thank Denis Lutke-Wiesmann¨ for proofreading the thesis, and the footnotes. Sven Hager found lots of overly short, overly long, and overly wrong statements. Thanks! Thanks to Prof. Martin Mauve for coming up with the idea, shielding us from bureaucracy, asking for explanation and rationale at every step, and ﬁnding all the errors nobody else found. iii Contents List of Figures viii 1 Motivation 1 1.1 Distribution of Speech . .2 1.2 Threat Model . .2 1.2.1 Nontechnical Attacks . .2 1.2.2 Internet Access . .3 1.2.3 Control over the User’s Computer . .4 1.2.4 Total Shutoff . .4 1.2.5 Physical Attacks . .5 1.2.6 IP Blocking . .5 1.2.7 DNS censorship . .6 1.2.8 Deep Packet Inspection . .6 1.2.9 Active Attacks . .8 1.2.10 Conclusions . .9 1.3 Decentralization . 10 1.4 Collaboration . 10 1.5 Structure of this Thesis .
[Show full text]
Copyright Assignment Agreement for Contributors to GNU Taler
Copyright Assignment Agreement for Contributors to GNU Taler Between: GNUnet e.V., a German association of GNUnet developers registered in München and seated in Garching bei München, represented by an authorized currently elected representative of the GNUnet e.V. Vorstand, hereinafter refer- red to as GNUnet e.V., And: hereinafter referred to as the Contributor. IT HAVING BEEN PREVIOUSLY ESTABLISHED: • That the GNU Taler project is directed and supported by GNUnet e.V., which aims to develop the GNU Taler software as part of the GNU project, distributed under GNU licenses (GNU Aero GPL, GNU GPL v3+, GNU LGPL) on the date of signing of this contract; • That this development project is opened to contributions submitted by individuals outside of GNUnet e.V., contributions which may be ocially submitted by their holder to GNUnet e.V. for the purpose of being integrated by the latter into the GNU Taler software, in successive versions edited and distributed by GNUnet e.V. or the GNU project; • That GNUnet e.V. wishes, in this context, to centralize copyright ownership on any new contribution integrated into the GNU Taler software edited and distributed by it; • That the Contributor wishes to participate, or authorize its personnel to participate, in the development of the aforementioned software; • That GNUnet e.V. has a publicly available licensing and collaborative development agree- ment with Taler Systems S.A. enabling Taler Systems S.A. to productize GNU Taler as a free software project subject to licensing constraints compatible with those imposed on GNUnet e.V. and granted to GNUnet e.V.
[Show full text]
Let's Make a GNU One! P≡P Privacy by Default
Speaker GNUnet.org IRC:sva [email protected] twitter@sva Let's make a GNU one! p≡p Privacy by Default. GNUnet 1970/80: Internet v1.0. Wow, I can access your computer, you can check out mine! Awesome! 2010/20: Internet v1.1. Sure I can access other computers and use their services. Wait, What? hey can also access mine!? 2025/30: Internet v2.0. "nd-to#end encryption and anonymi$ation of the ways data flows. p≡p Privacy by Default. Whats the problem of v1.1.? Network knows & learns too much Insecure de%au!ts & high comp!exities )entrali$ed components *e.g. IANA, ICANN, DNS, …) Administrators can be a target! /isuse of those flaws happens a!! over! p≡p Privacy by Default. Idea 0GNUnet is a mesh routing layer %or end#to#end encrypted networking and a %ramework %or distri.uted applications designed to replace the old insecure Internet protocol stack.1 GNUnet.org *%ounded 2332, %ollowed in academia) p≡p Privacy by Default. Layers *very hard- simplified version of the Internet: Google, FB ' Co +NS9:.;3< )=9U+= I=9BG= "thernet Physical Layer p≡p Privacy by Default. Layers Internet: GNUnet6 Google, FB & Co ... +NS/X.;3< ... )=9U+= ... I=/BGP ... "thernet ... =hysical Layer ... p≡p Privacy by Default. Layers Internet: GNUnet6 Google, FB & Co ... +NS/X.;3< ... )=9U+= ... I=/BGP ... "thernet ... =hysical Layer > =S/TCP9WLAN/... p≡p Privacy by Default. Layers GNUnet6 Start with what we have: ... e.g. )=, U+=, S/ =, H =, H =S, WLAN, Bluetooth, ,. ... Unreliable, out-o%-order packet ... delivery semantics. ... Automated ransport Selection *ATS- decides.
[Show full text]
The Gnunet System Christian Grothoff
The GNUnet System Christian Grothoff To cite this version: Christian Grothoff. The GNUnet System. Networking and Internet Architecture [cs.NI]. Université de Rennes 1, 2017. tel-01654244 HAL Id: tel-01654244 https://hal.inria.fr/tel-01654244 Submitted on 3 Dec 2017 HAL is a multi-disciplinary open access L’archive ouverte pluridisciplinaire HAL, est archive for the deposit and dissemination of sci- destinée au dépôt et à la diffusion de documents entific research documents, whether they are pub- scientifiques de niveau recherche, publiés ou non, lished or not. The documents may come from émanant des établissements d’enseignement et de teaching and research institutions in France or recherche français ou étrangers, des laboratoires abroad, or from public or private research centers. publics ou privés. Distributed under a Creative Commons Attribution| 4.0 International License 1 Thèsed'habilitation àdiriger des recherches Universitéede Rennes 1 Mention: Informatique The GNUnet System Christian Grothoff Soutenue le 10 octobre 2017 devant le jury composéde Messieurs les Professeurs: Anne-Marie Kermarrec (Universitéde Rennes 1) Tanja Lange (Technische Universiteit Eindhoven) George Danezis (University College London) Joe Cannataci (University of Groningen) Saddek Bensalem (University of Grenoble) Au vu des rapports de Messieurs les Professeurs: Tanja Lange (Technische Universiteit Eindhoven) George Danezis (University College London) Saddek Bensalem (University of Grenoble) Revision 1.0 2 Abstract GNUnet is an alternative network stack for building secure, decentralized and privacy-preserving distributed applications. Our goal is to replace the old inse- cure Internet protocol stack. Starting from an application for secure publication of files, it has grown to include all kinds of basic protocol components and ap- plications towards the creation of a GNU internet.
[Show full text]
Upgrade Issues
Upgrade issues Graph of new conflicts libsiloh5-0 libhdf5-lam-1.8.4 (x 3) xul-ext-dispmua (x 2) liboss4-salsa-asound2 (x 2) why sysklogd console-cyrillic (x 9) libxqilla-dev libxerces-c2-dev iceape xul-ext-adblock-plus gnat-4.4 pcscada-dbg Explanations of conflicts pcscada-dbg libpcscada2-dev gnat-4.6 gnat-4.4 Similar to gnat-4.4: libpolyorb1-dev libapq-postgresql1-dev adacontrol libxmlada3.2-dev libapq1-dev libaws-bin libtexttools2-dev libpolyorb-dbg libnarval1-dev libgnat-4.4-dbg libapq-dbg libncursesada1-dev libtemplates-parser11.5-dev asis-programs libgnadeodbc1-dev libalog-base-dbg liblog4ada1-dev libgnomeada2.14.2-dbg libgnomeada2.14.2-dev adabrowse libgnadecommon1-dev libgnatvsn4.4-dbg libgnatvsn4.4-dev libflorist2009-dev libopentoken2-dev libgnadesqlite3-1-dev libnarval-dbg libalog1-full-dev adacgi0 libalog0.3-base libasis2008-dbg libxmlezout1-dev libasis2008-dev libgnatvsn-dev libalog0.3-full libaws2.7-dev libgmpada2-dev libgtkada2.14.2-dbg libgtkada2.14.2-dev libasis2008 ghdl libgnatprj-dev gnat libgnatprj4.4-dbg libgnatprj4.4-dev libaunit1-dev libadasockets3-dev libalog1-base-dev libapq-postgresql-dbg libalog-full-dbg Weight: 5 Problematic packages: pcscada-dbg hostapd initscripts sysklogd Weight: 993 Problematic packages: hostapd | initscripts initscripts sysklogd Similar to initscripts: conglomerate libnet-akamai-perl erlang-base screenlets xlbiff plasma-widget-yawp-dbg fso-config- general gforge-mta-courier libnet-jifty-perl bind9 libplack-middleware-session-perl libmail-listdetector-perl masqmail libcomedi0 taxbird ukopp
[Show full text]
How Alice and Bob Meet If They Don't Like Onions
How Alice and Bob meet if they don’t like onions Survey of Network Anonymisation Techniques Erik Sy 34th Chaos Communication Congress, Leipzig Agenda 1. Introduction to Anonymity Networks Anonymity Strategies Towards Anonymity Adversaries 2. Anonymous Communication Networks I2P Freenet GNUnet JonDonym 3. Research Work 4. Conclusion 2 Anonymity Anonymity is the state of being not identifiable within a set of subjects, the an- onymity set. Andreas Pfitzmann 3 Sender Anonymity The sender may be anonymous only within a set of potential senders. 4 Recipient Anonymity The recipient may be anonymous only within a set of potential recipients. 5 Sender Recipient Anonymity 6 Unlinkability Unlinkability of two or more items of interest from an attacker’s perspective means that within the system, the attacker cannot sufficiently distinguish whe- ther these subjects are related or not. Pfitzmann, Hansen 7 Relationship Anonymity Alice can be linked to Bob. 8 Relationship Anonymity Traffic analysis • pattern in size of packets • pattern in timing of packets • content of messages • ... Alice cannot be linked to Bob. 9 Who do you trust? Strategies Towards Anonymity • Cover traffic • Broadcasting messages • Trusted third party (VPN, Proxy) • Shuffling and delaying of messages (mix, anonymous remailer) • Anonymity systems that distribute trust – Secure multi-party computation (DC-Nets) – Cascades of mixes – Onion routing – Garlic routing – ... 11 One-hop Mix 12 Onion Routing 13 Garlic Routing • Peer-to-peer • Uni-directional channels • Messages can be bundled • Uses layers of encryption 14 Adversaries External Adversary 16 Internal Adversary 17 Passive Adversary 18 Active Adversary 19 Local Adversary 20 Global Adversary 21 Anonymous Communication Networks Anonymous Communication Networks (ACNs) • Many defunct, unimplemented or unavailable networks exist – Conflux – MorphMix – Herbivore –..
[Show full text]
GNUNET + PSYC = \Oxoxo
GNUNET + PSYC = \oXoXo/ WE USED TO FEDERATE decentralized internet: everyone has servers servers federate no single company which server to choose & trust? ccc? brokep? autistici? gmail+ hotmail+ … even if your box is at home YOUR PERSONAL PRISM NODE my own server for 8€ a month: vulnerable cryptography memory can be monitored controlling system accessible by observers automated monitoring of federated networks … even if your box is at home DO NOT DEPEND ON SERVERS encrypt end-to-end forward secrecy protect connection meta-data (who? when? how much?) with GADS & multicast =: GNUnet WHY MULTICAST? chat & social networking = many-to-many communication updates, photos, articles... even profile edits sent to all everything ready to use on your device FULL MESH UNICAST, ROUND ROBIN THE FACEBOOGLE CLOUD MULTICAST DISTRIBUTION TREE SCALABILITY & SOCIAL NETWORKING to make it work.. either centralize (oh no, PRISM!) or multicast ... … like bittorrent or peer-to-peer TV (streaming) email #fail federated social web #fail SOCIAL GRAPH & ONION ROUTING combine multicast trees & onion routing trust relationship between nodes intermediary nodes agnostic of content motivation for "servers" as routers: my server = me (or a “good friend” of mine in my social graph) DUMB SERVERS ARE OKAY FOR NOW speed, reliability, storage space compensate for offline devices even if servers are corrupted, they only forward encrypted data – no important role as before WE'LL MAKE OURSELVES A GNU INTERNET syncing files between my devices group communications & data exchanges,
[Show full text]
Anonymous Network Concepts & Implementation
FORENSIC INSIGHT; DIGITAL FORENSICS COMMUNITY IN KOREA Anonymous Network Concepts & Implementation [email protected] Overview 1. Overview & Background 2. Anonymous Network tor freenet Gnunet I2P 3. Circumvention Techniques against Censorships Obfsproxy flashproxy forensicinsight.org Page 2 Overview . Attack Trends Summary Modern attack mostly involves malware, which Attempts to conceal attack itself Makes it hard to trace themselves down from network perspective Makes it difficult to find artifacts by wiping out themselves from system perspective Employs many techniques to be hard for analysis including: Anti-VM, Anti-disassembly, Anti-debugging and cryptography Infects a target but do nothing harm until they achieve their goals Imagine how future malware will evolve, which Employs the combination of existing – even legitimate – tools/techniques in a malicious fashion Emerges new variables targeting cloud computing Focuses highly on target-oriented attack which does not affect others Uses steganography technique in a wild more often Forms private tor network with exploited zombie machines forensicinsight.org Page 3 Overview . Malware/Crimeware Let’s briefly take a look at what to have, how to spread and what to do. Key Loggers Attachment Information Compromise Screenscrapers Peer-to-Peer Networks Spam Transmission Email, IM Redirectors Piggybacking Denial-of-Service, DDoS Session Hijackers Internet Worms, Virus Click Fraud Web Trojans Web Browser Exploits Data Ransoming Transaction Generators Server Compromise Identity Stealing Data Theft Affiliate Marketing Credit Card Abuse Man-in-the-Middle Phishing Defamation Rootkits Pharming Embezzlement Political Argument Misuse Distribution Features forensicinsight.org Page 4 Background . Necessity / Motivation (1/2) “Anonymity serves different interests for different user groups.” by Roger Dingledine, the creator of the Tor forensicinsight.org Page 5 Background .
[Show full text]