# Bibliography — sor-consent

Slug: `sor-consent` · Stage 01 · Compiled 2026-07-19 · Format per `_config/citations.md`
36 sources. Every entry verified via ≥1 of: Semantic Scholar, arXiv, Crossref, DBLP, or full-PDF
extraction. No entry asserted from title alone. Access date 2026-07-19 unless noted.

---

## A. Onion-routing foundations & nested-tunnel transport

### [Chaum1981]
Chaum, D. L. (1981). Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms.
*Communications of the ACM*, 24(2), 84–90.
DOI/URL: https://doi.org/10.1145/358549.358563
Accessed: 2026-07-19 · Tier: 1

### [Reed1997]
Reed, M. G., Syverson, P. F., & Goldschlag, D. M. (1997). Anonymous Connections and Onion Routing.
*Proc. 1997 IEEE Symposium on Security and Privacy*, 44–54.
DOI/URL: https://doi.org/10.1109/secpri.1997.601314
Accessed: 2026-07-19 · Tier: 1

### [Dingledine2004]
Dingledine, R., Mathewson, N., & Syverson, P. (2004). Tor: The Second-Generation Onion Router.
*Proc. 13th USENIX Security Symposium*.
DOI/URL: https://www.usenix.org/conference/13th-usenix-security-symposium/tor-second-generation-onion-router
(DTIC report DOI: https://doi.org/10.21236/ada465464) · Accessed: 2026-07-19 · Tier: 1

### [Egners2012]
Egners, A., Gatzen, D., Panchenko, A., & Meyer, U. (2012). Introducing SOR: SSH-based Onion Routing.
*Proc. 2012 26th Int'l Conf. on Advanced Information Networking and Applications Workshops (WAINA)*,
280–286. [IEEE Xplore doc 6185136]
DOI/URL: https://doi.org/10.1109/WAINA.2012.89
Accessed: 2026-07-19 · Tier: 1  ← **direct prior art (SOR)**

### [Honda2005]
Honda, O., Ohsaki, H., Imase, M., Ishizuka, M., & Murayama, J. (2005). Understanding TCP over TCP:
Effects of TCP Tunneling on End-to-End Throughput and Latency. *SPIE Proc. Vol. 6011* (Optics East).
DOI/URL: https://doi.org/10.1117/12.630496
Accessed: 2026-07-19 · Tier: 1

### [Michel2023]
Michel, F., & Bonaventure, O. (2023). Towards SSH3: How HTTP/3 Improves Secure Shells.
*arXiv preprint* arXiv:2312.08396 [cs.NI]. (impl: github.com/francoismichel/ssh3)
DOI/URL: https://arxiv.org/abs/2312.08396
Accessed: 2026-07-19 · Tier: 2 (preprint)

### [AlAzad2023]
Al Azad, M. W., Zahan, H., Taki, S. U., & Mastorakis, S. (2023). DarkHorse: A UDP-based Framework to
Improve the Latency of Tor Onion Services. *Proc. 48th IEEE Conf. on Local Computer Networks (LCN)*.
DOI/URL: https://arxiv.org/abs/2307.02429
Accessed: 2026-07-19 · Tier: 1 (conf.; arXiv copy)

---

## B. Traffic correlation / flow-linkability (RQ1)

### [NasrBH18]
Nasr, M., Bahramali, A., & Houmansadr, A. (2018). DeepCorr: Strong Flow Correlation Attacks on Tor
Using Deep Learning. *Proc. 2018 ACM SIGSAC CCS*, 1962–1976.
DOI/URL: https://doi.org/10.1145/3243734.3243824 (arXiv:1808.07285)
Accessed: 2026-07-19 · Tier: 1

### [OhYMH22]
Oh, S. E., Yang, T., Mathews, N., Holland, J. K., Rahman, M. S., Hopper, N., & Wright, M. (2022).
DeepCoFFEA: Improved Flow Correlation Attacks on Tor via Metric Learning and Amplification.
*43rd IEEE Symposium on Security and Privacy (S&P)*, 1915–1932.
DOI/URL: https://doi.org/10.1109/SP46214.2022.9833801
Accessed: 2026-07-19 · Tier: 1

### [SunEVLRCM15]
Sun, Y., Edmundson, A., Vanbever, L., Li, O., Rexford, J., Chiang, M., & Mittal, P. (2015). RAPTOR:
Routing Attacks on Privacy in Tor. *24th USENIX Security Symposium*, 271–286.
DOI/URL: https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/sun (arXiv:1503.03940)
Accessed: 2026-07-19 · Tier: 1

### [JohnsonWJSS13]
Johnson, A., Wacek, C., Jansen, R., Sherr, M., & Syverson, P. (2013). Users Get Routed: Traffic
Correlation on Tor by Realistic Adversaries. *Proc. 2013 ACM SIGSAC CCS*, 337–348.
DOI/URL: https://doi.org/10.1145/2508859.2516651
Accessed: 2026-07-19 · Tier: 1

### [SirinamIJW18]
Sirinam, P., Imani, M., Juarez, M., & Wright, M. (2018). Deep Fingerprinting: Undermining Website
Fingerprinting Defenses with Deep Learning. *Proc. 2018 ACM SIGSAC CCS*, 1928–1943.
DOI/URL: https://doi.org/10.1145/3243734.3243768 (arXiv:1801.02265)
Accessed: 2026-07-19 · Tier: 1

### [RahmanSMGW20]
Rahman, M. S., Sirinam, P., Mathews, N., Gangadhara, K. G., & Wright, M. (2020). Tik-Tok: The Utility
of Packet Timing in Website Fingerprinting Attacks. *Proc. on Privacy Enhancing Technologies (PoPETs)*
2020(3).
DOI/URL: https://doi.org/10.2478/popets-2020-0043 (arXiv:1902.06421)
Accessed: 2026-07-19 · Tier: 1

### [MurdochD05]
Murdoch, S. J., & Danezis, G. (2005). Low-Cost Traffic Analysis of Tor. *2005 IEEE Symposium on
Security and Privacy*, 183–195.
DOI/URL: https://doi.org/10.1109/SP.2005.12
Accessed: 2026-07-19 · Tier: 1

---

## C. Anonymity-set / entropy metrics, decentralized directory, Sybil (RQ2)

### [Serjantov2002]
Serjantov, A., & Danezis, G. (2002). Towards an Information Theoretic Metric for Anonymity.
*Privacy Enhancing Technologies (PET 2002)*, LNCS 2482, 41–53. Springer.
DOI/URL: https://doi.org/10.1007/3-540-36467-6_4
Accessed: 2026-07-19 · Tier: 1

### [Diaz2002]
Díaz, C., Seys, S., Claessens, J., & Preneel, B. (2002). Towards Measuring Anonymity.
*Privacy Enhancing Technologies (PET 2002)*, LNCS 2482, 54–68. Springer.
DOI/URL: https://doi.org/10.1007/3-540-36467-6_5
Accessed: 2026-07-19 · Tier: 1

### [Freedman2002]
Freedman, M. J., & Morris, R. (2002). Tarzan: A Peer-to-Peer Anonymizing Network Layer.
*Proc. 9th ACM CCS*, 193–206.
DOI/URL: https://doi.org/10.1145/586110.586137
Accessed: 2026-07-19 · Tier: 1

### [Mittal2011]
Mittal, P., Olumofin, F. G., Troncoso, C., Borisov, N., & Goldberg, I. (2011). PIR-Tor: Scalable
Anonymous Communication Using Private Information Retrieval. *20th USENIX Security Symposium*.
DOI/URL: https://www.usenix.org/conference/usenix-security-11/pir-tor-scalable-anonymous-communication-using-private-information
Accessed: 2026-07-19 · Tier: 1

### [Douceur2002]
Douceur, J. R. (2002). The Sybil Attack. *1st Int'l Workshop on Peer-to-Peer Systems (IPTPS)*,
LNCS 2429, 251–260. Springer.
DOI/URL: https://doi.org/10.1007/3-540-45748-8_24
Accessed: 2026-07-19 · Tier: 1

### [Danezis2003]
Danezis, G. (2003). Statistical Disclosure Attacks: Traffic Confirmation in Open Environments.
*Security and Privacy in the Age of Uncertainty (IFIP SEC 2003)*. (companion: Danezis & Serjantov,
*Information Hiding 2004*, LNCS 3200, 293–308, https://doi.org/10.1007/978-3-540-30114-1_21)
DOI/URL: https://www.freehaven.net/anonbib/cache/statistical-disclosure.pdf
Accessed: 2026-07-19 · Tier: 2

### [Winter2016]
Winter, P., Ensafi, R., Loesing, K., & Feamster, N. (2016). Identifying and Characterizing Sybils in
the Tor Network. *25th USENIX Security Symposium*, 1169–1185.
DOI/URL: https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/winter (arXiv:1602.07787)
Accessed: 2026-07-19 · Tier: 1

---

## D. Path selection, churn, learning-driven routing (RQ3)

### [Snader2008]
Snader, R., & Borisov, N. (2008). A Tune-up for Tor: Improving Security and Performance in the Tor
Network. *Network and Distributed System Security Symposium (NDSS)*.
DOI/URL: https://www.ndss-symposium.org/ndss2008/a-tune-up-for-tor-improving-security-and-performance-in-the-tor-network/
Accessed: 2026-07-19 · Tier: 1

### [Akhoondi2012]
Akhoondi, M., Yu, C., & Madhyastha, H. V. (2012). LASTor: A Low-Latency AS-Aware Tor Client.
*2012 IEEE Symposium on Security and Privacy*, 476–490.
DOI/URL: https://doi.org/10.1109/SP.2012.35
Accessed: 2026-07-19 · Tier: 1

### [Imani2017]
Imani, M., Amirabadi, M., & Wright, M. (2017). The Evaluation of Circuit Selection Methods on Tor.
*arXiv preprint* arXiv:1706.06457.
DOI/URL: https://arxiv.org/abs/1706.06457
Accessed: 2026-07-19 · Tier: 2 (preprint)

### [Stutzbach2006]
Stutzbach, D., & Rejaie, R. (2006). Understanding Churn in Peer-to-Peer Networks. *Proc. 6th ACM
SIGCOMM Internet Measurement Conference (IMC)*, 189–202.
DOI/URL: https://doi.org/10.1145/1177080.1177105
Accessed: 2026-07-19 · Tier: 1 · NOTE: abstract publisher-gated; quantitative session-length figures
cited from secondary literature, flagged as secondary in the review.

### [HassanzadehNazarabadi2019]
Hassanzadeh-Nazarabadi, Y., Küpçü, A., & Özkasap, Ö. (2019). Interlaced: Fully Decentralized Churn
Stabilization for Skip Graph-Based DHTs. *arXiv:1903.07289* (peer-reviewed: IEEE IPDPS 2021).
DOI/URL: https://arxiv.org/abs/1903.07289
Accessed: 2026-07-19 · Tier: 2

### [Barton2025]
Barton, A., Walsh, T., Imani, M., Ming, J., & Wright, M. (2025). PredicTor: A Global, Machine Learning
Approach to Tor Path Selection. *ACM Transactions on Privacy and Security*, 28(3), 1–31.
DOI/URL: https://doi.org/10.1145/3723356
Accessed: 2026-07-19 · Tier: 1

### [Constantinides2026]
Constantinides, N. (2026). A Traffic Analysis Attack Against Introduction Protocol and Onion Services.
*arXiv:2602.23560*.
DOI/URL: https://arxiv.org/abs/2602.23560
Accessed: 2026-07-19 · Tier: 2 (very recent preprint; not load-bearing — corroborate before citing a claim on it)

### [Abrol2024]
Abrol, A., Mohan, P. M., & Truong-Huu, T. (2024). A Deep Reinforcement Learning Approach for Adaptive
Traffic Routing in Next-gen Networks. *arXiv:2402.04515*.
DOI/URL: https://arxiv.org/abs/2402.04515
Accessed: 2026-07-19 · Tier: 2

---

## F. Friend-to-friend / social-trust / membership-concealing (G4 novelty neighbors)

### [Clarke2000]
Clarke, I., Sandberg, O., Wiley, B., & Hong, T. W. (2000/2001). Freenet: A Distributed Anonymous
Information Storage and Retrieval System. *Designing Privacy Enhancing Technologies*, LNCS 2009.
DOI/URL: https://doi.org/10.1007/3-540-44702-4_4
Accessed: 2026-07-19 · Tier: 1

### [Yu2006]
Yu, H., Kaminsky, M., Gibbons, P. B., & Flaxman, A. (2006). SybilGuard: Defending Against Sybil
Attacks via Social Networks. *Proc. ACM SIGCOMM 2006*, 267–278.
DOI/URL: https://doi.org/10.1145/1159913.1159945
Accessed: 2026-07-19 · Tier: 1

### [Vasserman2009]
Vasserman, E. Y., Jansen, R., Tyra, J., Hopper, N., & Kim, Y. (2009). Membership-Concealing Overlay
Networks. *Proc. 16th ACM CCS*, 390–399.
DOI/URL: https://doi.org/10.1145/1653662.1653709
Accessed: 2026-07-19 · Tier: 1

### [Danezis2010]
Danezis, G., Díaz, C., Troncoso, C., & Laurie, B. (2010). Drac: An Architecture for Anonymous
Low-Volume Communications. *Privacy Enhancing Technologies (PETS 2010)*, LNCS 6205, 202–219.
DOI/URL: https://doi.org/10.1007/978-3-642-14527-8_12
Accessed: 2026-07-19 · Tier: 1

### [Mittal2012]
Mittal, P., Wright, M., & Borisov, N. (2012). Pisces: Anonymous Communication Using Social Networks.
*arXiv:1208.6326* [cs.CR] (NDSS 2013).
DOI/URL: https://arxiv.org/abs/1208.6326
Accessed: 2026-07-19 · Tier: 2

### [Mittal2012b]
Mittal, P., Caesar, M., & Borisov, N. (2012). X-Vine: Secure and Pseudonymous Routing in DHTs Using
Social Networks. *NDSS 2012*.
DOI/URL: https://arxiv.org/abs/1109.0971
Accessed: 2026-07-19 · Tier: 1

### [Zhou2011]
Zhou, P., Luo, X., Chen, A., & Chang, R. K. C. (2011/2013). STor: Social Network based Anonymous
Communication in Tor. *arXiv:1110.5794* [cs.CR].
DOI/URL: https://arxiv.org/abs/1110.5794
Accessed: 2026-07-19 · Tier: 2

---

## Provenance note
Verification methods per source recorded in `sor-consent-search-log.md`. Two integrity flags carried
forward: [Stutzbach2006] numbers are secondary-sourced; [Constantinides2026] is a Feb-2026 preprint to
re-confirm before any load-bearing citation.