docs: self-contained reproduction — vendor frozen prereg + bibliography, add REPRODUCE.md
Make a clean clone reproducible without a sci-method checkout: - vendor the frozen pre-registration (docs/prereg/, pinned SHA-256 f22331a7… unchanged) and the 36-source bibliography into the repo - confirmatory_run.py resolves the in-repo prereg first, falling back to the canonical sci-method path; the SHA gate is identical (the pin, not the path, is the guarantee) - add REPRODUCE.md: tiered clone→env→seed→run→analyze checklist, honest about the isolated-engine containment rule and the 1.2 GB raw data that is not committed Defensive-measurement instrument; no change to measured behavior. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -0,0 +1,253 @@
|
||||
# Bibliography — sor-consent
|
||||
|
||||
Slug: `sor-consent` · Stage 01 · Compiled 2026-07-19 · Format per `_config/citations.md`
|
||||
36 sources. Every entry verified via ≥1 of: Semantic Scholar, arXiv, Crossref, DBLP, or full-PDF
|
||||
extraction. No entry asserted from title alone. Access date 2026-07-19 unless noted.
|
||||
|
||||
---
|
||||
|
||||
## A. Onion-routing foundations & nested-tunnel transport
|
||||
|
||||
### [Chaum1981]
|
||||
Chaum, D. L. (1981). Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms.
|
||||
*Communications of the ACM*, 24(2), 84–90.
|
||||
DOI/URL: https://doi.org/10.1145/358549.358563
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Reed1997]
|
||||
Reed, M. G., Syverson, P. F., & Goldschlag, D. M. (1997). Anonymous Connections and Onion Routing.
|
||||
*Proc. 1997 IEEE Symposium on Security and Privacy*, 44–54.
|
||||
DOI/URL: https://doi.org/10.1109/secpri.1997.601314
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Dingledine2004]
|
||||
Dingledine, R., Mathewson, N., & Syverson, P. (2004). Tor: The Second-Generation Onion Router.
|
||||
*Proc. 13th USENIX Security Symposium*.
|
||||
DOI/URL: https://www.usenix.org/conference/13th-usenix-security-symposium/tor-second-generation-onion-router
|
||||
(DTIC report DOI: https://doi.org/10.21236/ada465464) · Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Egners2012]
|
||||
Egners, A., Gatzen, D., Panchenko, A., & Meyer, U. (2012). Introducing SOR: SSH-based Onion Routing.
|
||||
*Proc. 2012 26th Int'l Conf. on Advanced Information Networking and Applications Workshops (WAINA)*,
|
||||
280–286. [IEEE Xplore doc 6185136]
|
||||
DOI/URL: https://doi.org/10.1109/WAINA.2012.89
|
||||
Accessed: 2026-07-19 · Tier: 1 ← **direct prior art (SOR)**
|
||||
|
||||
### [Honda2005]
|
||||
Honda, O., Ohsaki, H., Imase, M., Ishizuka, M., & Murayama, J. (2005). Understanding TCP over TCP:
|
||||
Effects of TCP Tunneling on End-to-End Throughput and Latency. *SPIE Proc. Vol. 6011* (Optics East).
|
||||
DOI/URL: https://doi.org/10.1117/12.630496
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Michel2023]
|
||||
Michel, F., & Bonaventure, O. (2023). Towards SSH3: How HTTP/3 Improves Secure Shells.
|
||||
*arXiv preprint* arXiv:2312.08396 [cs.NI]. (impl: github.com/francoismichel/ssh3)
|
||||
DOI/URL: https://arxiv.org/abs/2312.08396
|
||||
Accessed: 2026-07-19 · Tier: 2 (preprint)
|
||||
|
||||
### [AlAzad2023]
|
||||
Al Azad, M. W., Zahan, H., Taki, S. U., & Mastorakis, S. (2023). DarkHorse: A UDP-based Framework to
|
||||
Improve the Latency of Tor Onion Services. *Proc. 48th IEEE Conf. on Local Computer Networks (LCN)*.
|
||||
DOI/URL: https://arxiv.org/abs/2307.02429
|
||||
Accessed: 2026-07-19 · Tier: 1 (conf.; arXiv copy)
|
||||
|
||||
---
|
||||
|
||||
## B. Traffic correlation / flow-linkability (RQ1)
|
||||
|
||||
### [NasrBH18]
|
||||
Nasr, M., Bahramali, A., & Houmansadr, A. (2018). DeepCorr: Strong Flow Correlation Attacks on Tor
|
||||
Using Deep Learning. *Proc. 2018 ACM SIGSAC CCS*, 1962–1976.
|
||||
DOI/URL: https://doi.org/10.1145/3243734.3243824 (arXiv:1808.07285)
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [OhYMH22]
|
||||
Oh, S. E., Yang, T., Mathews, N., Holland, J. K., Rahman, M. S., Hopper, N., & Wright, M. (2022).
|
||||
DeepCoFFEA: Improved Flow Correlation Attacks on Tor via Metric Learning and Amplification.
|
||||
*43rd IEEE Symposium on Security and Privacy (S&P)*, 1915–1932.
|
||||
DOI/URL: https://doi.org/10.1109/SP46214.2022.9833801
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [SunEVLRCM15]
|
||||
Sun, Y., Edmundson, A., Vanbever, L., Li, O., Rexford, J., Chiang, M., & Mittal, P. (2015). RAPTOR:
|
||||
Routing Attacks on Privacy in Tor. *24th USENIX Security Symposium*, 271–286.
|
||||
DOI/URL: https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/sun (arXiv:1503.03940)
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [JohnsonWJSS13]
|
||||
Johnson, A., Wacek, C., Jansen, R., Sherr, M., & Syverson, P. (2013). Users Get Routed: Traffic
|
||||
Correlation on Tor by Realistic Adversaries. *Proc. 2013 ACM SIGSAC CCS*, 337–348.
|
||||
DOI/URL: https://doi.org/10.1145/2508859.2516651
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [SirinamIJW18]
|
||||
Sirinam, P., Imani, M., Juarez, M., & Wright, M. (2018). Deep Fingerprinting: Undermining Website
|
||||
Fingerprinting Defenses with Deep Learning. *Proc. 2018 ACM SIGSAC CCS*, 1928–1943.
|
||||
DOI/URL: https://doi.org/10.1145/3243734.3243768 (arXiv:1801.02265)
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [RahmanSMGW20]
|
||||
Rahman, M. S., Sirinam, P., Mathews, N., Gangadhara, K. G., & Wright, M. (2020). Tik-Tok: The Utility
|
||||
of Packet Timing in Website Fingerprinting Attacks. *Proc. on Privacy Enhancing Technologies (PoPETs)*
|
||||
2020(3).
|
||||
DOI/URL: https://doi.org/10.2478/popets-2020-0043 (arXiv:1902.06421)
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [MurdochD05]
|
||||
Murdoch, S. J., & Danezis, G. (2005). Low-Cost Traffic Analysis of Tor. *2005 IEEE Symposium on
|
||||
Security and Privacy*, 183–195.
|
||||
DOI/URL: https://doi.org/10.1109/SP.2005.12
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
---
|
||||
|
||||
## C. Anonymity-set / entropy metrics, decentralized directory, Sybil (RQ2)
|
||||
|
||||
### [Serjantov2002]
|
||||
Serjantov, A., & Danezis, G. (2002). Towards an Information Theoretic Metric for Anonymity.
|
||||
*Privacy Enhancing Technologies (PET 2002)*, LNCS 2482, 41–53. Springer.
|
||||
DOI/URL: https://doi.org/10.1007/3-540-36467-6_4
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Diaz2002]
|
||||
Díaz, C., Seys, S., Claessens, J., & Preneel, B. (2002). Towards Measuring Anonymity.
|
||||
*Privacy Enhancing Technologies (PET 2002)*, LNCS 2482, 54–68. Springer.
|
||||
DOI/URL: https://doi.org/10.1007/3-540-36467-6_5
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Freedman2002]
|
||||
Freedman, M. J., & Morris, R. (2002). Tarzan: A Peer-to-Peer Anonymizing Network Layer.
|
||||
*Proc. 9th ACM CCS*, 193–206.
|
||||
DOI/URL: https://doi.org/10.1145/586110.586137
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Mittal2011]
|
||||
Mittal, P., Olumofin, F. G., Troncoso, C., Borisov, N., & Goldberg, I. (2011). PIR-Tor: Scalable
|
||||
Anonymous Communication Using Private Information Retrieval. *20th USENIX Security Symposium*.
|
||||
DOI/URL: https://www.usenix.org/conference/usenix-security-11/pir-tor-scalable-anonymous-communication-using-private-information
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Douceur2002]
|
||||
Douceur, J. R. (2002). The Sybil Attack. *1st Int'l Workshop on Peer-to-Peer Systems (IPTPS)*,
|
||||
LNCS 2429, 251–260. Springer.
|
||||
DOI/URL: https://doi.org/10.1007/3-540-45748-8_24
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Danezis2003]
|
||||
Danezis, G. (2003). Statistical Disclosure Attacks: Traffic Confirmation in Open Environments.
|
||||
*Security and Privacy in the Age of Uncertainty (IFIP SEC 2003)*. (companion: Danezis & Serjantov,
|
||||
*Information Hiding 2004*, LNCS 3200, 293–308, https://doi.org/10.1007/978-3-540-30114-1_21)
|
||||
DOI/URL: https://www.freehaven.net/anonbib/cache/statistical-disclosure.pdf
|
||||
Accessed: 2026-07-19 · Tier: 2
|
||||
|
||||
### [Winter2016]
|
||||
Winter, P., Ensafi, R., Loesing, K., & Feamster, N. (2016). Identifying and Characterizing Sybils in
|
||||
the Tor Network. *25th USENIX Security Symposium*, 1169–1185.
|
||||
DOI/URL: https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/winter (arXiv:1602.07787)
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
---
|
||||
|
||||
## D. Path selection, churn, learning-driven routing (RQ3)
|
||||
|
||||
### [Snader2008]
|
||||
Snader, R., & Borisov, N. (2008). A Tune-up for Tor: Improving Security and Performance in the Tor
|
||||
Network. *Network and Distributed System Security Symposium (NDSS)*.
|
||||
DOI/URL: https://www.ndss-symposium.org/ndss2008/a-tune-up-for-tor-improving-security-and-performance-in-the-tor-network/
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Akhoondi2012]
|
||||
Akhoondi, M., Yu, C., & Madhyastha, H. V. (2012). LASTor: A Low-Latency AS-Aware Tor Client.
|
||||
*2012 IEEE Symposium on Security and Privacy*, 476–490.
|
||||
DOI/URL: https://doi.org/10.1109/SP.2012.35
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Imani2017]
|
||||
Imani, M., Amirabadi, M., & Wright, M. (2017). The Evaluation of Circuit Selection Methods on Tor.
|
||||
*arXiv preprint* arXiv:1706.06457.
|
||||
DOI/URL: https://arxiv.org/abs/1706.06457
|
||||
Accessed: 2026-07-19 · Tier: 2 (preprint)
|
||||
|
||||
### [Stutzbach2006]
|
||||
Stutzbach, D., & Rejaie, R. (2006). Understanding Churn in Peer-to-Peer Networks. *Proc. 6th ACM
|
||||
SIGCOMM Internet Measurement Conference (IMC)*, 189–202.
|
||||
DOI/URL: https://doi.org/10.1145/1177080.1177105
|
||||
Accessed: 2026-07-19 · Tier: 1 · NOTE: abstract publisher-gated; quantitative session-length figures
|
||||
cited from secondary literature, flagged as secondary in the review.
|
||||
|
||||
### [HassanzadehNazarabadi2019]
|
||||
Hassanzadeh-Nazarabadi, Y., Küpçü, A., & Özkasap, Ö. (2019). Interlaced: Fully Decentralized Churn
|
||||
Stabilization for Skip Graph-Based DHTs. *arXiv:1903.07289* (peer-reviewed: IEEE IPDPS 2021).
|
||||
DOI/URL: https://arxiv.org/abs/1903.07289
|
||||
Accessed: 2026-07-19 · Tier: 2
|
||||
|
||||
### [Barton2025]
|
||||
Barton, A., Walsh, T., Imani, M., Ming, J., & Wright, M. (2025). PredicTor: A Global, Machine Learning
|
||||
Approach to Tor Path Selection. *ACM Transactions on Privacy and Security*, 28(3), 1–31.
|
||||
DOI/URL: https://doi.org/10.1145/3723356
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Constantinides2026]
|
||||
Constantinides, N. (2026). A Traffic Analysis Attack Against Introduction Protocol and Onion Services.
|
||||
*arXiv:2602.23560*.
|
||||
DOI/URL: https://arxiv.org/abs/2602.23560
|
||||
Accessed: 2026-07-19 · Tier: 2 (very recent preprint; not load-bearing — corroborate before citing a claim on it)
|
||||
|
||||
### [Abrol2024]
|
||||
Abrol, A., Mohan, P. M., & Truong-Huu, T. (2024). A Deep Reinforcement Learning Approach for Adaptive
|
||||
Traffic Routing in Next-gen Networks. *arXiv:2402.04515*.
|
||||
DOI/URL: https://arxiv.org/abs/2402.04515
|
||||
Accessed: 2026-07-19 · Tier: 2
|
||||
|
||||
---
|
||||
|
||||
## F. Friend-to-friend / social-trust / membership-concealing (G4 novelty neighbors)
|
||||
|
||||
### [Clarke2000]
|
||||
Clarke, I., Sandberg, O., Wiley, B., & Hong, T. W. (2000/2001). Freenet: A Distributed Anonymous
|
||||
Information Storage and Retrieval System. *Designing Privacy Enhancing Technologies*, LNCS 2009.
|
||||
DOI/URL: https://doi.org/10.1007/3-540-44702-4_4
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Yu2006]
|
||||
Yu, H., Kaminsky, M., Gibbons, P. B., & Flaxman, A. (2006). SybilGuard: Defending Against Sybil
|
||||
Attacks via Social Networks. *Proc. ACM SIGCOMM 2006*, 267–278.
|
||||
DOI/URL: https://doi.org/10.1145/1159913.1159945
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Vasserman2009]
|
||||
Vasserman, E. Y., Jansen, R., Tyra, J., Hopper, N., & Kim, Y. (2009). Membership-Concealing Overlay
|
||||
Networks. *Proc. 16th ACM CCS*, 390–399.
|
||||
DOI/URL: https://doi.org/10.1145/1653662.1653709
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Danezis2010]
|
||||
Danezis, G., Díaz, C., Troncoso, C., & Laurie, B. (2010). Drac: An Architecture for Anonymous
|
||||
Low-Volume Communications. *Privacy Enhancing Technologies (PETS 2010)*, LNCS 6205, 202–219.
|
||||
DOI/URL: https://doi.org/10.1007/978-3-642-14527-8_12
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Mittal2012]
|
||||
Mittal, P., Wright, M., & Borisov, N. (2012). Pisces: Anonymous Communication Using Social Networks.
|
||||
*arXiv:1208.6326* [cs.CR] (NDSS 2013).
|
||||
DOI/URL: https://arxiv.org/abs/1208.6326
|
||||
Accessed: 2026-07-19 · Tier: 2
|
||||
|
||||
### [Mittal2012b]
|
||||
Mittal, P., Caesar, M., & Borisov, N. (2012). X-Vine: Secure and Pseudonymous Routing in DHTs Using
|
||||
Social Networks. *NDSS 2012*.
|
||||
DOI/URL: https://arxiv.org/abs/1109.0971
|
||||
Accessed: 2026-07-19 · Tier: 1
|
||||
|
||||
### [Zhou2011]
|
||||
Zhou, P., Luo, X., Chen, A., & Chang, R. K. C. (2011/2013). STor: Social Network based Anonymous
|
||||
Communication in Tor. *arXiv:1110.5794* [cs.CR].
|
||||
DOI/URL: https://arxiv.org/abs/1110.5794
|
||||
Accessed: 2026-07-19 · Tier: 2
|
||||
|
||||
---
|
||||
|
||||
## Provenance note
|
||||
Verification methods per source recorded in `sor-consent-search-log.md`. Two integrity flags carried
|
||||
forward: [Stutzbach2006] numbers are secondary-sourced; [Constantinides2026] is a Feb-2026 preprint to
|
||||
re-confirm before any load-bearing citation.
|
||||
Reference in New Issue
Block a user