how the great firewall of china is blocking tor
play

How the Great Firewall of China is Blocking Tor Philipp Winter and - PowerPoint PPT Presentation

Mar 25, 2024 •193 likes •454 views

How the Great Firewall of China is Blocking Tor Philipp Winter and Stefan Lindskog Karlstad University Aug. 6, 2012 In a nutshell 1. Investigated how Tor is being blocked 2. Speculated about the blocking infrastructure 3. Looked at

  1. How the Great Firewall of China is Blocking Tor Philipp Winter and Stefan Lindskog Karlstad University Aug. 6, 2012

  2. In a nutshell 1. Investigated how Tor is being blocked 2. Speculated about the blocking infrastructure 3. Looked at countermeasures Significant prior work done by Tim Wilde from Team Cymru!

  3. What Tim found out t n e i l C S L T r o o T l l e H Tor bridge

  4. Experimental setup ◮ China ◮ VPS (full root access) ◮ Found 32 open SOCKS proxies via Google ◮ PlanetLab ◮ Russia ◮ Middle relay ◮ Singapore ◮ Bridge in Amazon EC2 cloud ◮ Sweden ◮ Several bridges

  5. Meet Alice!

  6. Alice wants to use Tor!

  7. HTTP mostly does not work P T T H T S R P C T TCP RST torproject.org

  8. But HTTPS is fine! S P T T H ? torproject.org

  9. Now, Alice needs the consensus DROP 7/8 directory authorities were blocked

  10. SYN/ACK from relays and bridges swallowed N Y S K C A / N Y S Tor relay

  11. Most public relays in consensus blocked ◮ Downloaded consensus containing 2819 relays at the time ◮ Could establish TCP connection to only 1.6% of all relays ◮ After three days: Only one of them still reachable

  12. Where does the fingerprinting happen? PlanetLab Open SOCKS Tor TLS Client Hello VPS Outside China

  13. Bridges can be unblocked! ◮ Made GFC block 2 private bridges: ◮ 1st bridge : Blocked Chinese address space but whitelisted VPS in China ◮ 2nd bridge : Unmodified ◮ After ∼ 12 hours: First bridge became reachable again

  14. So what about the scanners? t n e i l C S L T r o o T l l e H Honeybridge in Singapore

  15. We now have our data! ◮ After 2.5 weeks: 3295 scans! ◮ Have a look yourself: http://www.cs.kau.se/philwint/ static/gfc/

Recommend

Analyzing the Great Firewall of China Over Space and Time Roya Ensafi, Philipp Winter, Abdullah

Analyzing the Great Firewall of China Over Space and Time Roya Ensafi, Philipp Winter, Abdullah

Analyzing the Great Firewall of China Over Space and Time Roya Ensafi, Philipp Winter, Abdullah Mueen, Jed Crandall June 30, 2015 The Battle Over Information Control On The Internet State of the Art Rent a control machine (VPS)

699 views • 26 slides
Sophos XG Firewall IP Partners ICT Systems & Services www.ippartners.gr XG Firewall

Sophos XG Firewall IP Partners ICT Systems & Services www.ippartners.gr XG Firewall

Sophos XG Firewall IP Partners ICT Systems & Services www.ippartners.gr XG Firewall Overview Todays top firewall problems What IT managers say about their existing firewall Firewall Satisfaction Survey (Spiceworks 2017) Top

548 views • 52 slides
ip.buffer with HTTP New features! Great for Managed Services! Legacy Out Firewall

ip.buffer with HTTP New features! Great for Managed Services! Legacy Out Firewall

ip.buffer with HTTP New features! Great for Managed Services! Legacy Out Firewall issues Server not easily scaled Non transactional Duplicate data on failure Legacy In Port forwarding VPN black holes

900 views • 30 slides
Firewall and IDS/IPS What is a firewall? firewall = wall to protect against fire propagation

Firewall and IDS/IPS What is a firewall? firewall = wall to protect against fire propagation

Firewall and IDS/IPS What is a firewall? firewall = wall to protect against fire propagation controlled connection between networks at different security levels = boundary protection ( L1 > L2 ) network at network at security

1.07k views • 67 slides
Make the Internet safe with DNS firewall Response Policy Zones (RPZ) SGNOG 7 2019 2 Great

Make the Internet safe with DNS firewall Response Policy Zones (RPZ) SGNOG 7 2019 2 Great

1 Make the Internet safe with DNS firewall Response Policy Zones (RPZ) SGNOG 7 2019 2 Great Asean Fastest Growing Area of Threats Over 200 Billion devices connected worldwide by 2020. Over 13 million active bots recorded for January 2019.

766 views • 38 slides
Examining How The Great Firewall Discovers Hidden Circumvention Servers Roya Ensafi , David

Examining How The Great Firewall Discovers Hidden Circumvention Servers Roya Ensafi , David

Examining How The Great Firewall Discovers Hidden Circumvention Servers Roya Ensafi , David Fifield, Philipp Winter, Nick Feamster, Nicholas Weaver, and Vern Paxson Oct 29, 2015 1 Circumventing Internet Censorship Using Proxies Web servers

641 views • 41 slides
How the Great Firewall discovers hidden circumvention servers Roya Ensafi David Fifield

How the Great Firewall discovers hidden circumvention servers Roya Ensafi David Fifield

How the Great Firewall discovers hidden circumvention servers Roya Ensafi David Fifield Philipp Winter Nick Weaver Nick Feamster Vern Paxson Much already known about GFW Numerous research papers and blog posts Open access

916 views • 53 slides
The Collateral Damage of Internet Censorship by DNS Injection Anonymous

The Collateral Damage of Internet Censorship by DNS Injection Anonymous

The Collateral Damage of Internet Censorship by DNS Injection Anonymous <zion.vlab@gmail.com> presented by Philip Levis 1 Basic Summary Great Firewall of China injects DNS responses to restrict access to domain names This

574 views • 43 slides
Firewalls in FreeBSD and OpenBSD What is firewall? firewall is a method of protecting hosts

Firewalls in FreeBSD and OpenBSD What is firewall? firewall is a method of protecting hosts

Firewalls in FreeBSD and OpenBSD What is firewall? firewall is a method of protecting hosts and networks connected to other hosts and networks against attacks from the outside and from the inside. a firewall is a network security system

440 views • 30 slides
Data Blocking Jon K. Nilsen Department of Physics and Scientific Computing Group University of

Data Blocking Jon K. Nilsen Department of Physics and Scientific Computing Group University of

Data Blocking Jon K. Nilsen Department of Physics and Scientific Computing Group University of Oslo, N-0316 Oslo, Norway Spring 2008 Computational Physics II FYS4410 Outline Data Blocking Why blocking? What is blocking? Blocking in

626 views • 14 slides
Lane ESD Technology Services Core Firewall Overview Districts Behind Firewall Blachly

Lane ESD Technology Services Core Firewall Overview Districts Behind Firewall Blachly

Lane ESD Technology Services Core Firewall Overview Districts Behind Firewall Blachly Creswell Crow-Applegate-Lorane Fern Ridge Junction City Lowell Mapleton Screened, but exempt from policies Marcola

539 views • 15 slides
Firewall vs. Scrambling 2 1 Review of Firewall argument Review of Hayden-Preskill 4 3

Firewall vs. Scrambling 2 1 Review of Firewall argument Review of Hayden-Preskill 4 3

Firewall vs. Scrambling 2 1 Review of Firewall argument Review of Hayden-Preskill 4 3 State-independent interior operators Interior operator from HP recovery 6 5 Resolution of the puzzle Effect of infalling observer 7 Discussions Beni

1.61k views • 106 slides
FIREMAN: A Toolkit for FIREwall Modeling and ANalysis Michael Lin All about firewalls A

FIREMAN: A Toolkit for FIREwall Modeling and ANalysis Michael Lin All about firewalls A

FIREMAN: A Toolkit for FIREwall Modeling and ANalysis Michael Lin All about firewalls A firewall is only as good as its configuration Big deal, it should be easy to configure a firewall, right? Basically... no. A Quantitative

507 views • 14 slides
Blocking in the 2 k Design Blocking may be required because: we cannot perform all required runs

Blocking in the 2 k Design Blocking may be required because: we cannot perform all required runs

ST 516 Experimental Statistics for Engineers II Blocking in the 2 k Design Blocking may be required because: we cannot perform all required runs under homogeneous conditions; e.g. raw material comes in limited batches; we want to carry out runs

487 views • 23 slides
Data Blocking Jon K. Nilsen Department of Physics and Scientific Computing Group University of

Data Blocking Jon K. Nilsen Department of Physics and Scientific Computing Group University of

Data Blocking Jon K. Nilsen Department of Physics and Scientific Computing Group University of Oslo, N-0316 Oslo, Norway Spring 2008 Computational Physics II FYS4410 Outline Data Blocking Implementing blocking Using vmc blocking

210 views • 8 slides
Blocking and Non-blocking Checkpointing and Rollback Recovery for Networks-on-Chip Claudia Rusu 1

Blocking and Non-blocking Checkpointing and Rollback Recovery for Networks-on-Chip Claudia Rusu 1

Blocking and Non-blocking Checkpointing and Rollback Recovery for Networks-on-Chip Claudia Rusu 1 , Cristian Grecu 2 , Lorena Anghel 1 1 TIMA Laboratory, CNRS-UJF-INP, Grenoble, France 2 SoC Laboratory, University of British Columbia, Vancouver,

700 views • 23 slides
Firewalls 1 Outline What are firewalls? Types of Firewalls Building a simple

Firewalls 1 Outline What are firewalls? Types of Firewalls Building a simple

Firewalls 1 Outline What are firewalls? Types of Firewalls Building a simple firewall using Netfilter Iptables firewall in Linux Stateful Firewall Application Firewall Evading Firewalls 2 Firewalls

811 views • 55 slides
Overview Firewall Security Perimeter Security Devices H/W vs. S/W Packet Filtering vs.

Overview Firewall Security Perimeter Security Devices H/W vs. S/W Packet Filtering vs.

Overview Firewall Security Perimeter Security Devices H/W vs. S/W Packet Filtering vs. Stateful Inspection Firewall Topologies Chapter 8 Firewall Rulebases Lecturer: Pei-yih Ting 1 2 Perimeter Security Devices Routers

291 views • 7 slides
Java Card Applet Firewall Java Card Applet Firewall Exploration and Exploitation Exploration and

Java Card Applet Firewall Java Card Applet Firewall Exploration and Exploitation Exploration and

Java Card Applet Firewall Java Card Applet Firewall Exploration and Exploitation Exploration and Exploitation Wojciech Mostowski and Erik Poll Digital Security Radboud University Nijmegen The Netherlands http://www.cs.ru.nl/~{woj,erikpoll}/

818 views • 42 slides
Firewall What is it? Do we need one? Oxford Hills School District March 5, 2018 What is a

Firewall What is it? Do we need one? Oxford Hills School District March 5, 2018 What is a

Firewall What is it? Do we need one? Oxford Hills School District March 5, 2018 What is a firewall? Term first used in 1851 Henry Ford used them to protect passengers from engine fires, smoke and heat. Computer networks: a part of a

500 views • 21 slides
Firewalls Summary Brief History of Firewalls What is a Firewall? Why Firewalls?

Firewalls Summary Brief History of Firewalls What is a Firewall? Why Firewalls?

Firewalls Summary Brief History of Firewalls What is a Firewall? Why Firewalls? Network Address Translation Types of Firewalls Linux/Windows Firewalls pfSense Blue Team Activity Brief History Firewall

348 views • 30 slides
Palo Alto Firewall What are next generation firewalls and how do they operate? Difference between

Palo Alto Firewall What are next generation firewalls and how do they operate? Difference between

Palo Alto Firewall What are next generation firewalls and how do they operate? Difference between NGFW and classic firewalls: Classic Firewall Next Generation Firewall Traffic filtering using Port, IP, and protocol Supported Supported VPN

1.23k views • 26 slides
Palo Alto Firewall What are next generation firewalls and how do they operate? Difference between

Palo Alto Firewall What are next generation firewalls and how do they operate? Difference between

Palo Alto Firewall What are next generation firewalls and how do they operate? Difference between NGFW and classic firewalls: Classic Firewall Next Generation Firewall Traffic filtering using Port, IP, and protocol Supported Supported VPN

533 views • 25 slides
utopias The Great City near Chengdu, China, designer: Adrian Smith & Gordon Gill

utopias The Great City near Chengdu, China, designer: Adrian Smith & Gordon Gill

utopias The Great City near Chengdu, China, designer: Adrian Smith & Gordon Gill Ebenezer Howard (1850-1928) Welfarestate-cities 4 10 Housing in Crawley (top) and centre in Harlow (right) France, 2005 Husby, 2013 10 Neo

367 views • 32 slides

More recommend