[tor-dev] Sybil attack detection

Karsten Loesing karsten at torproject.org
Thu Aug 7 14:28:58 UTC 2014

On 05/08/14 18:00, Karsten Loesing wrote:
> On 05/08/14 17:24, Philipp Winter wrote:
>> On Tue, Aug 05, 2014 at 11:37:45AM +0200, Karsten Loesing wrote:
>>> Started looking into better algorithms to detect Sybil attacks on the
>>> Tor network.  Current thinking is that we should define relay similarity
>>> metrics like common IP address prefix length or time between first seen
>>> in a consensus, go throw the consensus archives, and see which relays
>>> look similar but are not defined to be in the same family.
>> Do you already have some code or more details on that?
> Details, yes, see below.  Code, not really, but give me a few hours
> tomorrow to clean it up and put it online.


All the best,

More information about the tor-dev mailing list