[tor-dev] Building an automatic censorship-detection system for Tor
karsten.loesing at gmx.net
Wed Sep 14 06:17:05 UTC 2011
In the past years we observed sudden drops in Tor usage in certain
countries. Some of these events may be attributed to countries
specifically wanting to block Tor, as it enables their citizens to
circumvent their censorship infrastructure. Other events likely result
from country-wide Internet outages that are unrelated to Tor.
Two such events happened in January 2011 in Iran  and Egypt .
The key point is that we can derive from observed Tor usage when
something potentially interesting is going on in a country. We should
be able to build a system that keeps track of our daily user estimates
per country and automatically sends out a warning whenever there are
George Danezis wrote "An anomaly-based censorship-detection system for
Tor" . George's detection code  uses our daily user estimates 
as input and gives a list of sudden upturns and downturns per country as
output. We integrated the results of his script in the metrics website
 to demonstrate what events the detector recognizes as possible
For example, the detector would have warned in January 2011 about the
events in Iran  and Egypt , shown as red dots for downturns.
However, as one can see, George's script also detects quite a few false
positives. Whenever there's a red or blue dot, the script would have
issued a warning for a human to check. It would be neat to reduce these
false warnings while still catching the really suspicious events.
Want to help us make our censorship-detection system better? Any
suggestion to improve George's algorithm or to come up with an
alternative approach to detect possible censorship events in our data
would be much appreciated! Let us know if we can help you get started.
More information about the tor-dev