Prevent Tor timing attacks

Closed Posted 7 years ago Paid on delivery
Closed Paid on delivery

I have a system that uses a Raspberry Pi to route a Tor-only connection to a 2nd computer.

But I am concerned about Tor timing attacks.

For example, the web browser on the 2nd machine could be hacked, and then used to upload data to a certain website. If loads of data was sent, then this traffic could be measured by a global adversary as loads of traffic from my IP, and thus, they know that this Tor machine belongs to my IP.

Another example would be, they hack the web browser of the 2nd machine, and they watch to see what websites I am typing. They can then use something like packet injection to issue a fake response from the server, to flood loads of data in the return, and therefore, measure increased traffic flows to my real IP address.

These are examples of timing attacks.

I want some sort of system that makes a timing attack not possible. You might want to assume that even the Raspberry Pi running the Tor router itself could be hacked, and then, the Tor protection could be switched off, or at least a 2nd copy of the data would be routed over a non-Tor connection.

There are so many ways to break this system, and I wonder how to stop this.

If you can clearly explain to me how you would achieve this, then I will award you this project.

Computer Security Linux Network Administration

Project ID: #11690658

About the project

6 proposals Remote project Active 7 years ago

6 freelancers are bidding on average $754 for this job

ranganathp

FREELANCER RECOMMENDED ------------------------------------------------------ Can help... I am an Expert... Lets Start! Please start a Discussion with me and we can get started from there... Please check the past p More

$2000 USD in 30 days
(6 Reviews)
3.5
prashushinde9

Hello, I understood the initial scope of this project. Although i want to discuss further this job in order to prepare the final concept for this project. After Complete discussion over the call or in chat, i wi More

$773 USD in 20 days
(1 Review)
3.2
ITSecurityPro

A proposal has not yet been provided

$500 USD in 5 days
(3 Reviews)
2.4