Version 4 (modified by karsten, 2 years ago) (diff)

Add related work.

Obfuscation Simulation

We'd like to improve directory-request statistics by obfuscating values on relays before they are reported to the directory authorities. A possible obfuscation method is to add Laplace noise to request counts for all ~250 countries, so that it's unclear whether a request was actually made by a user or is just noise.

But before we do this we need to find out whether obfuscated values would still be useful enough to estimate user numbers in the Tor network. Let's run a simulation using archived descriptors.

Summary of findings and results


Detailed results

Graph: Absolute difference to user number estimates per country and day when obfuscating directory-request statistics

CSV files

Code for simulation

git clone -b dirreqstats
cd metrics-web
tar xf libs-for-metrics-web.tar
mv lib shared/
cd modules/clients/
./     # this takes a while, and it produces quite some noise on the console!
R --slave -f compare-simulations.R

Related work

  • Karin Herm. Privacy analysis of Tor's in-memory statistics. Technical Report 2017-04-001, The Tor Project, April 2017. .pdf
  • David Goulet, Aaron Johnson, George Kadianakis, and Karsten Loesing. Hidden-service statistics reported by relays. Technical Report 2015-04-001, The Tor Project, April 2015. .pdf
  • George Kadianakis and Karsten Loesing. Extrapolating network totals from hidden-service statistics. Technical Report 2015-01-001, The Tor Project, January 2015. .pdf

Attachments (2)

Download all attachments as: .zip