Verschleiern Der Spuren Im Internet

Eine kurze, unvollständigeÜbersicht und Bewertung Vorhandener Software und Techniken Lars Schimmer, Graz, 24.05.2011 Vorratsdatenspeicherung Gesetzliche Regelung zum Speichern und vorhalten über 6 Monate der personenbezogenen Daten über die Nutzung von Telefon und Internet ab 1.4.2012 Genauer Gesetzestext noch nicht öffentlich Zugriff auf Stamm- und Zugangsdaten für Staatsanwaltschaft und Kriminalpolizei jederzeit möglich Sämtliche Nutzer in Österreich betroffen Wo fallen Daten an? Unterscheidung: Nutzdaten/Protokolldaten Jede TCP/IP und UDP Verbindung (packet switching) sendet IP mit http – diverse Header: referrer, proxy-via,… IRC – alle bekannten Clients senden IP mit, DCC Flash, Java – eigenes Protokoll an http vorbei SVN,GIT,MTN,bazaar – telnet/ftp/http POP3/IMAP/SMTP – IP, Absender, Empfänger der Email P2P – viele direkte Verbindungen, IP, Liste der Dateien auf der Festplatte Technik zum Verschleiern Generell: IP fällt beim Provider IMMER an (ausser bei MESH Netzwerken, da hats aber MAC-ID) 3 Techniken zum verschleiern der Korrelation Absender der Daten Person Zwischenstationen (Hops) Anderes Routing Privates Netz Generell: Nutzdaten sollten verschlüsselt sein! Software zum Verschleiern Zu Punkt 1: Proxy, z.b.IPredator: glauben an Sicherheit, via-proxy JonDo/JAP: Kommerziell/Privat, Hintertür Tor I2P Zu Punkt 2: Freenet R-Share/Stealthnet/Off GnuNet/Mute Zu Punkt 3: Hamachi Andere Tools, die IPv6 rausgeben oder 1.0.0.0/8 als VPN nutzen Techniken Punkt 1: Daten gehen zu einem anderen PC, dann zum Server; Daten gehen über mehrere andere PCs und dann erst zum Server, low latency Turtle Hopping, Router zu Router zu Router zum Ziel; Verbindungslos! VPN unter den Teilnehmern, eigenes Subnetz unabhängig von der eigenen IP Funktionen der Software Einfache Proxy: http/https; TCP JonDo: TCP Tor: TCP (http/https,IRC,weniger P2P oder Streaming; proxy zum Internet) I2P: TCP/UDP (http,IRC,P2P,Streaming; internes Netz) Freenet: Datenaustausch (distributed filestorage) R-Share/Stealthnet/OFF: P2P GnuNet/Mute: P2P VPN: TCP/UDP Pro/Contra Software Proxy Pro schnell, einfach, guter Support Contra teuer, single Hop, Glauben statt Wissen (Logs) JonDo/Jap Pro schnell, einfach, bekannt Contra teilweise kommerziell, Hintertür, nicht alle Dienste Tor Pro mediumschnell, weit verbreitet, einfach, wissen statt glauben, C Contra CPU Last, viele User, Proxy statt Filter, kein UDP, fixed circuit length (3 Hops), C I2P Pro mediumschnell, universell, P2P, wissen statt glauben, Java Contra hohe CPU Last, wenige OutProxy, medium einfach, wenig academic review, angepasste Clients nötig, Java Pro/Contra Software Freenet Pro: schnell, weit verbreitet, einfach Contra: langsam, nur Dateiaustausch, TurtleHopping, Darknet braucht Freunde R-Share/Stealthnet Pro: schnell, einfach Contra: klein, unsicher, recht neu/unmaintained GnuNet/Mute Pro: sicher Contra: zu klein, zu jung, experimentell, langsam VPN Pro: schnell, einfach Contra: stört das Netz, unsicher Allgemeine Regeln IMMER Software kontrollieren, Einstellungen setzen (normale Software ist nicht für Anonymität gedacht und gibt per se viel zu viele Infos frei) Immer drauf achten, was man macht/schreibt/sagt Uhrzeit beachten (Zeitzonen) Cookies löschen/verneinen Vertrauenswürdige Hardware, welcher Software/Firma vertraut man mehr als anderen? Divesere weitere Angriffsszenarien bleiben: One-ping-is-enough Server-flood FRAGEN? Raum und Zeit für Fragen, Hinweise, Probleme! .

Copy Link

Recommended publications

Uila Supported Apps
Uila Supported Applications and Protocols updated Oct 2020 Application/Protocol Name Full Description 01net.com 01net website, a French high-tech news site. 050 plus is a Japanese embedded smartphone application dedicated to 050 plus audio-conferencing. 0zz0.com 0zz0 is an online solution to store, send and share files 10050.net China Railcom group web portal. This protocol plug-in classifies the http traffic to the host 10086.cn. It also 10086.cn classifies the ssl traffic to the Common Name 10086.cn. 104.com Web site dedicated to job research. 1111.com.tw Website dedicated to job research in Taiwan. 114la.com Chinese web portal operated by YLMF Computer Technology Co. Chinese cloud storing system of the 115 website. It is operated by YLMF 115.com Computer Technology Co. 118114.cn Chinese booking and reservation portal. 11st.co.kr Korean shopping website 11st. It is operated by SK Planet Co. 1337x.org Bittorrent tracker search engine 139mail 139mail is a chinese webmail powered by China Mobile. 15min.lt Lithuanian news portal Chinese web portal 163. It is operated by NetEase, a company which 163.com pioneered the development of Internet in China. 17173.com Website distributing Chinese games. 17u.com Chinese online travel booking website. 20 minutes is a free, daily newspaper available in France, Spain and 20minutes Switzerland. This plugin classifies websites. 24h.com.vn Vietnamese news portal 24ora.com Aruban news portal 24sata.hr Croatian news portal 24SevenOffice 24SevenOffice is a web-based Enterprise resource planning (ERP) systems. 24ur.com Slovenian news portal 2ch.net Japanese adult videos web site 2Shared 2shared is an online space for sharing and storage.
[Show full text]
BIS Volume 21 Numero 1
Boletim do Instituto de Saúde Volume 21 – n.0 1 – Julho 2020 ISSN 1518-1812 / On-line: 1809-7529 1 | Julho 2020 1 | Julho o Boletim do Instituto de Saúde | BIS | Volume 21 | n. Volume | BIS de Saúde Boletim do Instituto Valentina Massens, influenciadora digital. Comunicação em Saúde na Era Digital Instituto de Saúde Boletim do Instituto de Saúde – BIS Rua Santo Antônio, 590 – Bela Vista Volume 21 – n.0 1 – Julho 2020 São Paulo-SP – CEP 01314-000 ISSN 1518-1812 / On-line: 1809-7529 Tel: (11) 3116-8500 / Fax: (11) 3105-2772 Publicação semestral do Instituto de Saúde www.isaude.sp.gov.br [email protected] Tiragem: 2000 exemplares Rua Santo Antônio, 590 – Bela Vista Secretaria de Estado da Saúde de São Paulo São Paulo-SP – CEP 01314-000 Secretário de Estado da Saúde de São Paulo Tel: (11) 3116-8500 / Fax: (11) 3105-2772 Dr. José Henrique Germann Ferreira [email protected] Instituto de Saúde Diretora do Instituto de Saúde Instituto de Saúde – www.isaude.sp.gov.br Luiza Sterman Heimann Portal de Revistas da SES-SP – http://periodicos.ses.sp.bvs.br Vice-diretora do Instituto de Saúde Editor Sônia I. Venâncio Márcio Derbli Diretora do Centro de Pesquisa e Desenvolvimento para o SUS-SP Editores científicos Tereza Etsuko da Costa Rosa Maria Thereza Bonilha Dubugras (Instituto de Saúde); Peter Rembischevski (Agência Nacional de Vigilância Sanitária); Vidal Augusto Zapparoli Diretora do Centro de Tecnologias de Saúde para o SUS-SP Castro Melo (Escola Politécnica da Universidade de São Paulo); Rogerio Tereza Setsuko Toma Venturineli
[Show full text]
4.4 IT Infrastructure 4.4.1 Does the Institution Have a Comprehensive IT
4.4 IT Infrastructure 4.4.1 Does the Institution have a comprehensive IT Policy with regard to: 1. IT Service Management ITS Centre for Dental Studies & Research is focused towards the applications of new technologies for easing up the day-to-day jobs and functions performed within and outside the campus. To achieve the same we at ITS CDSR are running many application to facilitate the routine works including the OPD & IPD, Resource management through ERP, and effective complaint handling and resolutions using Cloud Hosted Complaint Management System. Seamless 24*7 availability of Internet plays a vital role for effective use of the mentioned applications. A core IT staff team provides immediate resolutions to the user complaints and maintain the application uptime. 2. Information Security • Server Level Security: Quick Heal End Point Security Server Edition is installed on all the Servers to protect the Information from all Threats. • Client Level Security: All the desktop machines are installed with Quick Heal End Point Security to protect the client side Information from various Threats. • Network Level Security: The Campus Network is protected using UTM Device which protects the entire network from breaches and intrusion attacks from Internet. • Backups: o Server Side: Daily backups of all the Servers a taken by the Server Staff on External Hard Drives. o Client Side: Daily backups are taken by the staff members of their data on External Hard Drives. 3. Network Security • Installation of Unified Threat Management (UTM) Device: The campus wide network is protected from the Threats which propagate from Internet using the UTM device which offers following facilities: o Firewall o Gateway Level Anti-Virus o Gateway Level Anti-Spyware o Gateway Level Anti-Malware o Intrusion Detection/Prevention System o SSL and IPSec VPN’s Note: Please find detailed UTM Policy implementation for Authentication, Web & Application Filtration, Quota Management, QoS, and Data Transfer Limits in ANNEXURE I.
[Show full text]
Año De La Salud Y Del Personal Sanitario Anexo Número: Referencia
G O B I E R N O DE LA P R O V I N C I A DE B U E N O S A I R E S 2021 - Año de la Salud y del Personal Sanitario Anexo Número: Referencia: EX-2020-26076623-GDEBA-DDPRYMGEMSGP Anexo VI VI. SUPERINTENDENCIA DE INVESTIGACIONES DEL TRÁFICO DE DROGAS ILÍCITAS Y CRIMEN ORGANIZADO. VI.1) Curso Básico en tareas Operativas para la Lucha y Neutralización del Narcotráfico. 1. Nombre de la Capacitación: Curso Básico en tareas Operativas para la Lucha y Neutralización del Narcotráfico. Superintendencia o área responsable: Dirección de Prevención – Div. Capacitación. Superintendencia de Investigaciones del Tráfico de Drogas Ilícitas y Crimen Organizado, Ministerio de Seguridad de la Provincia de Buenos Aires. Modalidad: Semipresencial. Sin afectación del servicio. Carga Horaria: La propuesta demandará 32 horas reloj equivalente a 48 horas cátedras, las que se distribuirán en 4 encuentros presenciales de 8 horas reloj cada uno de: 9.00 a 17.00 hs. con un espacio de refrigerio. Duración: Se prevé llevar a cabo el presente entre los meses de marzo y abril del 2021. La presente capacitación tendrá una duración de 4 encuentros. Los cuáles serán distribuidos en una asistencia por semana. Coordinadores de la Capacitación: Comisario Inspector (Cdo) Benítez Edgar. Capitán (E.G.) Viviana Rivero. Teniente (E.G.) Fernández Marina. Tel (0221) 4231867/68 Int. 122. Mail de referencia: [email protected]; [email protected] 2. Nombre del Proyecto de Capacitación y Área Responsable del Proyecto: Curso Básico en tareas Operativas para la Lucha y Neutralización del Narcotráfico. Área Responsable del Proyecto: Dirección de Prevención – Div.
[Show full text]
The Current State of Anonymous Filesharing
The current state of anonymous file-sharing Bachelor Thesis Marc Seeger Studiengang Medieninformatik Hochschule der Medien Stuttgart July 24, 2008 I Abstract This thesis will discuss the current situation of anonymous file-sharing. An overview of the currently most popular file-sharing protocols and their properties concerning anonymity and scalability will be discussed. The new generation of "designed-for-anonymity" protocols, the patterns behind them and their current implementations will be covered as well as the usual attacks on anonymity in computer networks. II Declaration of originality I hereby declare that all information in this document has been obtained and presented in accordance with academic rules and ethical conduct. I also declare that, as required by these rules and conduct, I have fully cited and referenced all material and results that are not original to this work. Marc Seeger Stuttgart, July 24, 2008 III Contents 1 Different needs for anonymity 1 2 Basic concept of anonymity in file-sharing 2 2.1 What is there to know about me? . 2 2.2 The wrong place at the wrong time . 2 2.3 Motivation: Freedom of speech / Freedom of the press . 3 3 Technical Networking Background 3 3.1 Namespaces . 3 3.2 Routing . 4 3.3 Identification throughout the OSI layers . 5 4 Current popular file-sharing-protocols 7 4.1 A small history of file-sharing . 7 4.1.1 The beginning: Server Based . 7 4.1.2 The evolution: Centralized Peer-to-Peer . 8 4.1.3 The current state: Decentralized Peer-to-Peer . 8 4.1.4 The new kid on the block: Structured Peer-to-Peer networks .
[Show full text]
Netbravo Mobile Raw Data Format
netBravo netBravo Mobile Raw Data Format By CLEMENT Francis, FOLLONI Gianluca, LUZARDI Stefano, MANDA Costin Version 3.0.1 Date: 16 February 2016 netBravo Mobile Raw Data Format Within the “netBravo” mobile application the owner can save to an external file the measurements made by the device. The Android and iOS application can extract the “Broadband measurements” file. In addition, only the Android application can extract the “Cellular measurements” and the “Wi-Fi measurements” files. All file are CSV comma separated file with the first row containing the column name and this document explain the format and the meaning of each field. Text identifier is the character ‘”’. Android devices save the files on external storage directory under the subdirectory. /netbravo. The external storage directory name depends on the device brand, but usually is the directory shared when connected to the host computer. (Example: ‘/storage/sdcard0/netbravo). Android application show the extracted file names on the user interface. iOS devices save the CSV file into ‘Application Document’ directory, that is manageable only via iTunes. The file can be also shared directly inside the netBravo application using AirDrop or the tools available in the standard sharing panel. Broadband measurements file This file contains data from the “Broadband history” with detail about: - Date, time and duration of tests - Location in which the test was made - Network related information (IP network information, network type, etc.) - Mobile cell or Wi-Fi cell information The extracted file name is in the form: netbravo_broadband_yyyyMMddhhMMss.csv Next table show the file format. The application extract all the listed fields.
[Show full text]
A Review of Cyber-Ranges and Test-Beds: Current and Future Trends
Article A Review of Cyber-Ranges and Test-Beds: Current and Future Trends Elochukwu Ukwandu 7 , Mohamed Amine Ben Farah 1 , Hanan Hindy 4 , David Brosset 2 , Dimitris Kavallieros 5,6 , Robert Atkinson 1 , Christos Tachtatzis 1 , Miroslav Bures 3 , Ivan Andonovic 1 , and Xavier Bellekens 1 1 Dept. of Electronic and Electrical Engineering, University of Strathclyde, Glasgow, United Kingdom; mohamed.ben-farah,robert.atkinson,christos.tachtatzis,ivan.andonovic,[email protected] 2 Naval Academy Research Institute, Arts et Métiers Institute of Technology, France; [email protected] 3 Department of Computer Science, FEE, Czech Technical University in Prague; [email protected] 4 Department of Cyber-Security, Abertay University, United Kingdom ; [email protected] 5 The Center for Security Studies (KEMEA); 6 University of Peloponnese, Department of Informatics and Telecommunications; 7 Dept. of Computer Science, Cardiff School of Technologies, Cardiff Metropolitan University, Cardiff, Wales, United Kingdom; [email protected] * Correspondence: [email protected] Received: date; Accepted: date; Published: date Abstract: Cyber situational awareness has been proven to be of value in forming a comprehensive understanding of threats and vulnerabilities within organisations, as the degree of exposure is governed by the prevailing levels of cyber-hygiene and established processes. A more accurate assessment of the security provision informs on the most vulnerable environments that necessitate more diligent management. The rapid proliferation in the automation of cyber-attacks is reducing the gap between information and operational technologies and the need to review the current levels of robustness against new sophisticated cyber-attacks, trends, technologies and mitigation countermeasures has become pressing.
[Show full text]
A Real-World Case Study Using I2P
Technische Universität Munchen¨ Fakultät fur¨ Informatik Lehrstuhl fur¨ Netzarchitekturen und Netzdienste Privacy-Implications of Performance-Based Peer Selection by Onion-Routers: A Real-World Case Study using I2P Masterarbeit in Informatik durchgefuhrt¨ am Lehrstuhl fur¨ Netzarchitekturen und Netzdienste Fakultät fur¨ Informatik Technische Universität Munchen¨ von Michael Herrmann März 2011 Technische Universität Munchen¨ Fakultät fur¨ Informatik Lehrstuhl fur¨ Netzarchitekturen und Netzdienste Auswirkung auf die Anonymität von performanzbasierter Peer-Auswahl bei Onion-Routern: Eine Fallstudie mit I2P { Privacy-Implications of Performance-Based Peer Selection by Onion-Routers: A Real-World Case Study using I2P Masterarbeit in Informatik durchgefuhrt¨ am Lehrstuhl fur¨ Netzarchitekturen und Netzdienste Fakultät fur¨ Informatik Technische Universität Munchen¨ von Michael Herrmann Aufgabensteller und Betreuer: Christian Grothoff, PhD (UCLA) Tag der Abgabe: 29. März 2011 Ich versichere, dass ich die vorliegende Arbeit selbständig verfasst und nur die angegebenen Quellen und Hilfsmittel verwendet habe. I assure the single handed composition of this thesis only supported by declared resources. Garching, den 29 März 2011 Acknowledgment: This thesis is based on a paper with the same title from Michael Herrmann and Christian Grothoff, published at Privacy Enhancing Technologies Symposium (PETS) 2011. I thank my advisor Christian Grothoff for the possibility to work with him on this thesis and his great support. Not only was working with him very inspiring, he also pushed me to do the best I possibly can. Also I thank Katie Haus and Nathan Evans. Katie for her great work on the pictures in this thesis and her amazing patience to get them exactly as I wanted them to be.
[Show full text]
Msc Thesis TCP Empirical Analysis
Master of Science Thesis Empirical analysis of traffic to establish a flow termination time-out Leipzig, November 2012 presented by Juan Molina Rodríguez Electronic Engineering Student directed by Ralf Hoffman Ipoque GmbH supervised by Josep Solé Pareta and Valentín Carela Español Abstract The inspection of contents of packets flowing on the Internet, also called Deep Packet Inspection (DPI), is the main technology used for traffic classification and anomaly searching due to its reliability and accuracy. During the last years, the evolution on the Internet has led to a deep incursion in many scenarios of DPI and several applications based on it. The exponential increase in bandwidth on the Internet has made the DPI on-line mode a highly exigent task. This technology has the responsibility of facing large amounts of data in real time, which supposes a big challenge. To achieve this task, it is a must to optimize the process involved on it. This implies not only an efficient software usage but also to exploit the hardware elements. For that reason both the scientific and private community have become interested in recent years in optimizing this technology in several aspects (e.g. searching of patterns or specific hardware architectures). Delving into that topic, it is important to consider the memory usage since it is not an unlimited resource. To properly carry out an analysis of the traffic, DPI uses several parameters which have to be stored while the connections or flows are alive. Thus, in order to improve this process, it is necessary to know what is the expected time-out for a flow to finish and therefore delete its related information from memory.
[Show full text]
Thesis Title
ALMA MATER STUDIORUM UNIVERSITA` DI BOLOGNA SCUOLA DI INGEGNERIA E ARCHITETTURA Corso di Laurea in Ingegneria Elettronica, Informatica e Telecomunicazioni DARKNET E DEEP WEB: IL LATO OSCURO DEL WEB PER LA PRIVACY E LA PROTEZIONE DEI DATI Elaborata nel corso di: Sistemi Distribuiti Tesi di Laurea di: Relatore: PATRYK WOJTOWICZ Prof. ANDREA OMICINI Co-relatori: STEFANO MARIANI ANNO ACCADEMICO 2013 2014 SESSIONE III 1 ||||||||||||||||||||||||||{ Indice Contents 1 1 Introduzione 1 2 I Dati 2 2.1 Dati informatici . .2 2.2 Organizzazione dei dati . .2 2.3 Big Data e Data Mining . .3 2.4 Metadati . .7 2.5 Consapevolezza dei dati . .8 3 Privacy 10 3.1 Dati sensibili e personali . 10 3.2 Concetto di privacy nel mondo . 11 3.3 Garante per la protezione dei dati personali . 13 4 Sicurezza 15 4.1 Una nuova era . 15 4.1.1 Datagate . 18 4.1.2 Violazione dei dati in Europa . 20 4.2 Cookie . 21 4.2.1 Caratteristiche . 22 4.2.2 Problemi sulla privacy . 23 4.3 Sicurezza nel mobile . 24 5 Deep Web 27 5.1 Il lato nascosto di Internet . 27 5.2 Tor Browser Bundle: la porta per il Deep Web . 29 5.2.1 Aspetti problematici . 34 5.2.2 L'altra faccia della medaglia . 35 6 Darknet 39 6.1 Freenet . 39 6.1.1 Storia . 39 6.1.2 Caratteristiche e interfaccia utente . 40 6.1.3 Speciﬁche tecniche . 41 2 3 6.1.4 Darknet VS OpenNet . 44 6.2 anoNet . 45 6.2.1 Cos'`eAnonet . 45 6.3 StealthNet .
[Show full text]
Deep Packet Inspection Services
Deep Packet Inspection Services Growth in mobile data networks and the rising demand for network intelligence have spurred the growth of deep packet inspection market. Traditionally Network Equipment Manufacturers leverage technology and expertise from DPI specialists to accelerate their time to market, maximize value added capabilities, minimize costs & risks and keep their internal developers focused on delivering next generation solutions to markets. And DPI Vendors, in a race to remain competitive, face their own set of challenges: Updating library of Application and Protocol signatures: Growing number of new protocols get introduced into the network by upcoming OTT providers, P2P providers, content providers, content aggregators and operators. DPI vendors must continuously invest in redeveloping their software to handle the latest protocol versions. Monitoring packets for Application and Protocol OTT providers, P2P providers, content providers, content aggregators and operators seek to evade visibility by regu- lary updating their application or protocol rendering the application/protocol signature library of DPI vendors outdated. Use of Obfuscation by Applications and protocols : DPI vendors are required to keep a regular watch on such Creators of several applications have chosen to conceal their changes. operation by scrambling their related communications to avoid traffic shaping done by subscriber management Use of Encryption by Applications and protocols : devices. In the DPI world, life is becoming much more difficult with the use of encryption – the concealing of data to guarantee Our services enable DPI vendors to enhance DPI functionali- security and privacy. Encryption is a procedure which renders ties to overcome the above obstacles by providing efficient the contents of a message or a file unintelligible to anyone deep packet capture and enabling comprehensive service not authorized to read it.
[Show full text]
The Application Usage and Risk Report an Analysis of End User Application Trends in the Enterprise
The Application Usage and Risk Report An Analysis of End User Application Trends in the Enterprise 9th Edition, June 2012 Palo Alto Networks 3300 Olcott Street Santa Clara, CA 94089 www.paloaltonetworks.com Table of Contents Executive Summary ........................................................................................................ 3 Demographics ................................................................................................................. 4 Streaming Media Bandwidth Consumption Triples ......................................................... 5 Streaming Video Business Risks ................................................................................................................ 6 Streaming Video Security Risks ................................................................................................................. 7 P2P Streaming and Unknown Malware ................................................................................................. 8 P2P Filesharing Bandwidth Consumption Increases 700% ............................................ 9 Business and Security Risks Both Old and New ...................................................................................... 10 Browser-based Filesharing Maintains Popularity ................................................................................... 10 Where Did The Megaupload Traffic Go? ................................................................................................... 11 Which Ports Do Filesharing Applications
[Show full text]