Files
hack-house/docs/sor-consent-bibliography.md
T
leetcrypt 8f30be186c docs: self-contained reproduction — vendor frozen prereg + bibliography, add REPRODUCE.md
Make a clean clone reproducible without a sci-method checkout:
- vendor the frozen pre-registration (docs/prereg/, pinned SHA-256 f22331a7… unchanged)
  and the 36-source bibliography into the repo
- confirmatory_run.py resolves the in-repo prereg first, falling back to the canonical
  sci-method path; the SHA gate is identical (the pin, not the path, is the guarantee)
- add REPRODUCE.md: tiered clone→env→seed→run→analyze checklist, honest about the
  isolated-engine containment rule and the 1.2 GB raw data that is not committed

Defensive-measurement instrument; no change to measured behavior.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-07-23 09:32:39 -07:00

11 KiB
Raw Blame History

Bibliography — sor-consent

Slug: sor-consent · Stage 01 · Compiled 2026-07-19 · Format per _config/citations.md 36 sources. Every entry verified via ≥1 of: Semantic Scholar, arXiv, Crossref, DBLP, or full-PDF extraction. No entry asserted from title alone. Access date 2026-07-19 unless noted.


A. Onion-routing foundations & nested-tunnel transport

[Chaum1981]

Chaum, D. L. (1981). Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms. Communications of the ACM, 24(2), 8490. DOI/URL: https://doi.org/10.1145/358549.358563 Accessed: 2026-07-19 · Tier: 1

[Reed1997]

Reed, M. G., Syverson, P. F., & Goldschlag, D. M. (1997). Anonymous Connections and Onion Routing. Proc. 1997 IEEE Symposium on Security and Privacy, 4454. DOI/URL: https://doi.org/10.1109/secpri.1997.601314 Accessed: 2026-07-19 · Tier: 1

[Dingledine2004]

Dingledine, R., Mathewson, N., & Syverson, P. (2004). Tor: The Second-Generation Onion Router. Proc. 13th USENIX Security Symposium. DOI/URL: https://www.usenix.org/conference/13th-usenix-security-symposium/tor-second-generation-onion-router (DTIC report DOI: https://doi.org/10.21236/ada465464) · Accessed: 2026-07-19 · Tier: 1

[Egners2012]

Egners, A., Gatzen, D., Panchenko, A., & Meyer, U. (2012). Introducing SOR: SSH-based Onion Routing. Proc. 2012 26th Int'l Conf. on Advanced Information Networking and Applications Workshops (WAINA), 280286. [IEEE Xplore doc 6185136] DOI/URL: https://doi.org/10.1109/WAINA.2012.89 Accessed: 2026-07-19 · Tier: 1 ← direct prior art (SOR)

[Honda2005]

Honda, O., Ohsaki, H., Imase, M., Ishizuka, M., & Murayama, J. (2005). Understanding TCP over TCP: Effects of TCP Tunneling on End-to-End Throughput and Latency. SPIE Proc. Vol. 6011 (Optics East). DOI/URL: https://doi.org/10.1117/12.630496 Accessed: 2026-07-19 · Tier: 1

[Michel2023]

Michel, F., & Bonaventure, O. (2023). Towards SSH3: How HTTP/3 Improves Secure Shells. arXiv preprint arXiv:2312.08396 [cs.NI]. (impl: github.com/francoismichel/ssh3) DOI/URL: https://arxiv.org/abs/2312.08396 Accessed: 2026-07-19 · Tier: 2 (preprint)

[AlAzad2023]

Al Azad, M. W., Zahan, H., Taki, S. U., & Mastorakis, S. (2023). DarkHorse: A UDP-based Framework to Improve the Latency of Tor Onion Services. Proc. 48th IEEE Conf. on Local Computer Networks (LCN). DOI/URL: https://arxiv.org/abs/2307.02429 Accessed: 2026-07-19 · Tier: 1 (conf.; arXiv copy)


B. Traffic correlation / flow-linkability (RQ1)

[NasrBH18]

Nasr, M., Bahramali, A., & Houmansadr, A. (2018). DeepCorr: Strong Flow Correlation Attacks on Tor Using Deep Learning. Proc. 2018 ACM SIGSAC CCS, 19621976. DOI/URL: https://doi.org/10.1145/3243734.3243824 (arXiv:1808.07285) Accessed: 2026-07-19 · Tier: 1

[OhYMH22]

Oh, S. E., Yang, T., Mathews, N., Holland, J. K., Rahman, M. S., Hopper, N., & Wright, M. (2022). DeepCoFFEA: Improved Flow Correlation Attacks on Tor via Metric Learning and Amplification. 43rd IEEE Symposium on Security and Privacy (S&P), 19151932. DOI/URL: https://doi.org/10.1109/SP46214.2022.9833801 Accessed: 2026-07-19 · Tier: 1

[SunEVLRCM15]

Sun, Y., Edmundson, A., Vanbever, L., Li, O., Rexford, J., Chiang, M., & Mittal, P. (2015). RAPTOR: Routing Attacks on Privacy in Tor. 24th USENIX Security Symposium, 271286. DOI/URL: https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/sun (arXiv:1503.03940) Accessed: 2026-07-19 · Tier: 1

[JohnsonWJSS13]

Johnson, A., Wacek, C., Jansen, R., Sherr, M., & Syverson, P. (2013). Users Get Routed: Traffic Correlation on Tor by Realistic Adversaries. Proc. 2013 ACM SIGSAC CCS, 337348. DOI/URL: https://doi.org/10.1145/2508859.2516651 Accessed: 2026-07-19 · Tier: 1

[SirinamIJW18]

Sirinam, P., Imani, M., Juarez, M., & Wright, M. (2018). Deep Fingerprinting: Undermining Website Fingerprinting Defenses with Deep Learning. Proc. 2018 ACM SIGSAC CCS, 19281943. DOI/URL: https://doi.org/10.1145/3243734.3243768 (arXiv:1801.02265) Accessed: 2026-07-19 · Tier: 1

[RahmanSMGW20]

Rahman, M. S., Sirinam, P., Mathews, N., Gangadhara, K. G., & Wright, M. (2020). Tik-Tok: The Utility of Packet Timing in Website Fingerprinting Attacks. Proc. on Privacy Enhancing Technologies (PoPETs) 2020(3). DOI/URL: https://doi.org/10.2478/popets-2020-0043 (arXiv:1902.06421) Accessed: 2026-07-19 · Tier: 1

[MurdochD05]

Murdoch, S. J., & Danezis, G. (2005). Low-Cost Traffic Analysis of Tor. 2005 IEEE Symposium on Security and Privacy, 183195. DOI/URL: https://doi.org/10.1109/SP.2005.12 Accessed: 2026-07-19 · Tier: 1


C. Anonymity-set / entropy metrics, decentralized directory, Sybil (RQ2)

[Serjantov2002]

Serjantov, A., & Danezis, G. (2002). Towards an Information Theoretic Metric for Anonymity. Privacy Enhancing Technologies (PET 2002), LNCS 2482, 4153. Springer. DOI/URL: https://doi.org/10.1007/3-540-36467-6_4 Accessed: 2026-07-19 · Tier: 1

[Diaz2002]

Díaz, C., Seys, S., Claessens, J., & Preneel, B. (2002). Towards Measuring Anonymity. Privacy Enhancing Technologies (PET 2002), LNCS 2482, 5468. Springer. DOI/URL: https://doi.org/10.1007/3-540-36467-6_5 Accessed: 2026-07-19 · Tier: 1

[Freedman2002]

Freedman, M. J., & Morris, R. (2002). Tarzan: A Peer-to-Peer Anonymizing Network Layer. Proc. 9th ACM CCS, 193206. DOI/URL: https://doi.org/10.1145/586110.586137 Accessed: 2026-07-19 · Tier: 1

[Mittal2011]

Mittal, P., Olumofin, F. G., Troncoso, C., Borisov, N., & Goldberg, I. (2011). PIR-Tor: Scalable Anonymous Communication Using Private Information Retrieval. 20th USENIX Security Symposium. DOI/URL: https://www.usenix.org/conference/usenix-security-11/pir-tor-scalable-anonymous-communication-using-private-information Accessed: 2026-07-19 · Tier: 1

[Douceur2002]

Douceur, J. R. (2002). The Sybil Attack. 1st Int'l Workshop on Peer-to-Peer Systems (IPTPS), LNCS 2429, 251260. Springer. DOI/URL: https://doi.org/10.1007/3-540-45748-8_24 Accessed: 2026-07-19 · Tier: 1

[Danezis2003]

Danezis, G. (2003). Statistical Disclosure Attacks: Traffic Confirmation in Open Environments. Security and Privacy in the Age of Uncertainty (IFIP SEC 2003). (companion: Danezis & Serjantov, Information Hiding 2004, LNCS 3200, 293308, https://doi.org/10.1007/978-3-540-30114-1_21) DOI/URL: https://www.freehaven.net/anonbib/cache/statistical-disclosure.pdf Accessed: 2026-07-19 · Tier: 2

[Winter2016]

Winter, P., Ensafi, R., Loesing, K., & Feamster, N. (2016). Identifying and Characterizing Sybils in the Tor Network. 25th USENIX Security Symposium, 11691185. DOI/URL: https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/winter (arXiv:1602.07787) Accessed: 2026-07-19 · Tier: 1


D. Path selection, churn, learning-driven routing (RQ3)

[Snader2008]

Snader, R., & Borisov, N. (2008). A Tune-up for Tor: Improving Security and Performance in the Tor Network. Network and Distributed System Security Symposium (NDSS). DOI/URL: https://www.ndss-symposium.org/ndss2008/a-tune-up-for-tor-improving-security-and-performance-in-the-tor-network/ Accessed: 2026-07-19 · Tier: 1

[Akhoondi2012]

Akhoondi, M., Yu, C., & Madhyastha, H. V. (2012). LASTor: A Low-Latency AS-Aware Tor Client. 2012 IEEE Symposium on Security and Privacy, 476490. DOI/URL: https://doi.org/10.1109/SP.2012.35 Accessed: 2026-07-19 · Tier: 1

[Imani2017]

Imani, M., Amirabadi, M., & Wright, M. (2017). The Evaluation of Circuit Selection Methods on Tor. arXiv preprint arXiv:1706.06457. DOI/URL: https://arxiv.org/abs/1706.06457 Accessed: 2026-07-19 · Tier: 2 (preprint)

[Stutzbach2006]

Stutzbach, D., & Rejaie, R. (2006). Understanding Churn in Peer-to-Peer Networks. Proc. 6th ACM SIGCOMM Internet Measurement Conference (IMC), 189202. DOI/URL: https://doi.org/10.1145/1177080.1177105 Accessed: 2026-07-19 · Tier: 1 · NOTE: abstract publisher-gated; quantitative session-length figures cited from secondary literature, flagged as secondary in the review.

[HassanzadehNazarabadi2019]

Hassanzadeh-Nazarabadi, Y., Küpçü, A., & Özkasap, Ö. (2019). Interlaced: Fully Decentralized Churn Stabilization for Skip Graph-Based DHTs. arXiv:1903.07289 (peer-reviewed: IEEE IPDPS 2021). DOI/URL: https://arxiv.org/abs/1903.07289 Accessed: 2026-07-19 · Tier: 2

[Barton2025]

Barton, A., Walsh, T., Imani, M., Ming, J., & Wright, M. (2025). PredicTor: A Global, Machine Learning Approach to Tor Path Selection. ACM Transactions on Privacy and Security, 28(3), 131. DOI/URL: https://doi.org/10.1145/3723356 Accessed: 2026-07-19 · Tier: 1

[Constantinides2026]

Constantinides, N. (2026). A Traffic Analysis Attack Against Introduction Protocol and Onion Services. arXiv:2602.23560. DOI/URL: https://arxiv.org/abs/2602.23560 Accessed: 2026-07-19 · Tier: 2 (very recent preprint; not load-bearing — corroborate before citing a claim on it)

[Abrol2024]

Abrol, A., Mohan, P. M., & Truong-Huu, T. (2024). A Deep Reinforcement Learning Approach for Adaptive Traffic Routing in Next-gen Networks. arXiv:2402.04515. DOI/URL: https://arxiv.org/abs/2402.04515 Accessed: 2026-07-19 · Tier: 2


F. Friend-to-friend / social-trust / membership-concealing (G4 novelty neighbors)

[Clarke2000]

Clarke, I., Sandberg, O., Wiley, B., & Hong, T. W. (2000/2001). Freenet: A Distributed Anonymous Information Storage and Retrieval System. Designing Privacy Enhancing Technologies, LNCS 2009. DOI/URL: https://doi.org/10.1007/3-540-44702-4_4 Accessed: 2026-07-19 · Tier: 1

[Yu2006]

Yu, H., Kaminsky, M., Gibbons, P. B., & Flaxman, A. (2006). SybilGuard: Defending Against Sybil Attacks via Social Networks. Proc. ACM SIGCOMM 2006, 267278. DOI/URL: https://doi.org/10.1145/1159913.1159945 Accessed: 2026-07-19 · Tier: 1

[Vasserman2009]

Vasserman, E. Y., Jansen, R., Tyra, J., Hopper, N., & Kim, Y. (2009). Membership-Concealing Overlay Networks. Proc. 16th ACM CCS, 390399. DOI/URL: https://doi.org/10.1145/1653662.1653709 Accessed: 2026-07-19 · Tier: 1

[Danezis2010]

Danezis, G., Díaz, C., Troncoso, C., & Laurie, B. (2010). Drac: An Architecture for Anonymous Low-Volume Communications. Privacy Enhancing Technologies (PETS 2010), LNCS 6205, 202219. DOI/URL: https://doi.org/10.1007/978-3-642-14527-8_12 Accessed: 2026-07-19 · Tier: 1

[Mittal2012]

Mittal, P., Wright, M., & Borisov, N. (2012). Pisces: Anonymous Communication Using Social Networks. arXiv:1208.6326 [cs.CR] (NDSS 2013). DOI/URL: https://arxiv.org/abs/1208.6326 Accessed: 2026-07-19 · Tier: 2

[Mittal2012b]

Mittal, P., Caesar, M., & Borisov, N. (2012). X-Vine: Secure and Pseudonymous Routing in DHTs Using Social Networks. NDSS 2012. DOI/URL: https://arxiv.org/abs/1109.0971 Accessed: 2026-07-19 · Tier: 1

[Zhou2011]

Zhou, P., Luo, X., Chen, A., & Chang, R. K. C. (2011/2013). STor: Social Network based Anonymous Communication in Tor. arXiv:1110.5794 [cs.CR]. DOI/URL: https://arxiv.org/abs/1110.5794 Accessed: 2026-07-19 · Tier: 2


Provenance note

Verification methods per source recorded in sor-consent-search-log.md. Two integrity flags carried forward: [Stutzbach2006] numbers are secondary-sourced; [Constantinides2026] is a Feb-2026 preprint to re-confirm before any load-bearing citation.