De-anonymizing BitTorrent Users on Tor
Stevens Le Blond, Pere Manils, Abdelberi Chaabane, Mohamed Ali Kaafar,, Arnaud Legout, Claude Castellucia, Walid Dabbous (INRIA Sophia Antipolis /, INRIA Rh\^one-Alpes)
TL;DR
This paper presents three attacks that de-anonymize BitTorrent users on Tor by revealing their IP addresses and linking different application streams, highlighting privacy vulnerabilities in Tor's multiplexing.
Contribution
It introduces novel attack methods to de-anonymize BitTorrent users on Tor and demonstrates how multiplexing can compromise user privacy.
Findings
Three distinct attacks successfully reveal user IPs.
Multiplexing streams can link different applications to the same IP.
Privacy vulnerabilities in Tor's handling of BitTorrent traffic.
Abstract
Some BitTorrent users are running BitTorrent on top of Tor to preserve their privacy. In this extended abstract, we discuss three different attacks to reveal the IP address of BitTorrent users on top of Tor. In addition, we exploit the multiplexing of streams from different applications into the same circuit to link non-BitTorrent applications to revealed IP addresses.
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsInternet Traffic Analysis and Secure E-voting · Privacy-Preserving Technologies in Data · Digital Rights Management and Security