RPKI-Based Location-Unaware Tor Guard Relay Selection Algorithms
Zhifan Lu, Siyang Sun, Yixin Sun

TL;DR
This paper introduces RPKI-based location-unaware relay selection algorithms for Tor, aiming to enhance security against routing attacks while maintaining low performance overhead.
Contribution
It proposes novel relay selection algorithms leveraging RPKI data, specifically ROA and ROV, to improve security without location awareness.
Findings
Matching Selection algorithm increases ROA-ROV matched pairs to 48.47%.
Achieves security improvements with minimal performance overhead.
Uses Shadow simulations and benchmarking for evaluation.
Abstract
Tor is a well-known anonymous communication tool, used by people with various privacy and security needs. Prior works have exploited routing attacks to observe Tor traffic and deanonymize Tor users. Subsequently, location-aware relay selection algorithms have been proposed to defend against such attacks on Tor. However, location-aware relay selection algorithms are known to be vulnerable to information leakage on client locations and guard placement attacks. Can we design a new location-unaware approach to relay selection while achieving the similar goal of defending against routing attacks? Towards this end, we leverage the Resource Public Key Infrastructure (RPKI) in designing new guard relay selection algorithms. We develop a lightweight Discount Selection algorithm by only incorporating Route Origin Authorization (ROA) information, and a more secure Matching Selection algorithm by…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsNetwork Security and Intrusion Detection · Internet Traffic Analysis and Secure E-voting · Mobile Ad Hoc Networks
