Make a clean clone reproducible without a sci-method checkout: - vendor the frozen pre-registration (docs/prereg/, pinned SHA-256 f22331a7… unchanged) and the 36-source bibliography into the repo - confirmatory_run.py resolves the in-repo prereg first, falling back to the canonical sci-method path; the SHA gate is identical (the pin, not the path, is the guarantee) - add REPRODUCE.md: tiered clone→env→seed→run→analyze checklist, honest about the isolated-engine containment rule and the 1.2 GB raw data that is not committed Defensive-measurement instrument; no change to measured behavior. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
11 KiB
Bibliography — sor-consent
Slug: sor-consent · Stage 01 · Compiled 2026-07-19 · Format per _config/citations.md
36 sources. Every entry verified via ≥1 of: Semantic Scholar, arXiv, Crossref, DBLP, or full-PDF
extraction. No entry asserted from title alone. Access date 2026-07-19 unless noted.
A. Onion-routing foundations & nested-tunnel transport
[Chaum1981]
Chaum, D. L. (1981). Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms. Communications of the ACM, 24(2), 84–90. DOI/URL: https://doi.org/10.1145/358549.358563 Accessed: 2026-07-19 · Tier: 1
[Reed1997]
Reed, M. G., Syverson, P. F., & Goldschlag, D. M. (1997). Anonymous Connections and Onion Routing. Proc. 1997 IEEE Symposium on Security and Privacy, 44–54. DOI/URL: https://doi.org/10.1109/secpri.1997.601314 Accessed: 2026-07-19 · Tier: 1
[Dingledine2004]
Dingledine, R., Mathewson, N., & Syverson, P. (2004). Tor: The Second-Generation Onion Router. Proc. 13th USENIX Security Symposium. DOI/URL: https://www.usenix.org/conference/13th-usenix-security-symposium/tor-second-generation-onion-router (DTIC report DOI: https://doi.org/10.21236/ada465464) · Accessed: 2026-07-19 · Tier: 1
[Egners2012]
Egners, A., Gatzen, D., Panchenko, A., & Meyer, U. (2012). Introducing SOR: SSH-based Onion Routing. Proc. 2012 26th Int'l Conf. on Advanced Information Networking and Applications Workshops (WAINA), 280–286. [IEEE Xplore doc 6185136] DOI/URL: https://doi.org/10.1109/WAINA.2012.89 Accessed: 2026-07-19 · Tier: 1 ← direct prior art (SOR)
[Honda2005]
Honda, O., Ohsaki, H., Imase, M., Ishizuka, M., & Murayama, J. (2005). Understanding TCP over TCP: Effects of TCP Tunneling on End-to-End Throughput and Latency. SPIE Proc. Vol. 6011 (Optics East). DOI/URL: https://doi.org/10.1117/12.630496 Accessed: 2026-07-19 · Tier: 1
[Michel2023]
Michel, F., & Bonaventure, O. (2023). Towards SSH3: How HTTP/3 Improves Secure Shells. arXiv preprint arXiv:2312.08396 [cs.NI]. (impl: github.com/francoismichel/ssh3) DOI/URL: https://arxiv.org/abs/2312.08396 Accessed: 2026-07-19 · Tier: 2 (preprint)
[AlAzad2023]
Al Azad, M. W., Zahan, H., Taki, S. U., & Mastorakis, S. (2023). DarkHorse: A UDP-based Framework to Improve the Latency of Tor Onion Services. Proc. 48th IEEE Conf. on Local Computer Networks (LCN). DOI/URL: https://arxiv.org/abs/2307.02429 Accessed: 2026-07-19 · Tier: 1 (conf.; arXiv copy)
B. Traffic correlation / flow-linkability (RQ1)
[NasrBH18]
Nasr, M., Bahramali, A., & Houmansadr, A. (2018). DeepCorr: Strong Flow Correlation Attacks on Tor Using Deep Learning. Proc. 2018 ACM SIGSAC CCS, 1962–1976. DOI/URL: https://doi.org/10.1145/3243734.3243824 (arXiv:1808.07285) Accessed: 2026-07-19 · Tier: 1
[OhYMH22]
Oh, S. E., Yang, T., Mathews, N., Holland, J. K., Rahman, M. S., Hopper, N., & Wright, M. (2022). DeepCoFFEA: Improved Flow Correlation Attacks on Tor via Metric Learning and Amplification. 43rd IEEE Symposium on Security and Privacy (S&P), 1915–1932. DOI/URL: https://doi.org/10.1109/SP46214.2022.9833801 Accessed: 2026-07-19 · Tier: 1
[SunEVLRCM15]
Sun, Y., Edmundson, A., Vanbever, L., Li, O., Rexford, J., Chiang, M., & Mittal, P. (2015). RAPTOR: Routing Attacks on Privacy in Tor. 24th USENIX Security Symposium, 271–286. DOI/URL: https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/sun (arXiv:1503.03940) Accessed: 2026-07-19 · Tier: 1
[JohnsonWJSS13]
Johnson, A., Wacek, C., Jansen, R., Sherr, M., & Syverson, P. (2013). Users Get Routed: Traffic Correlation on Tor by Realistic Adversaries. Proc. 2013 ACM SIGSAC CCS, 337–348. DOI/URL: https://doi.org/10.1145/2508859.2516651 Accessed: 2026-07-19 · Tier: 1
[SirinamIJW18]
Sirinam, P., Imani, M., Juarez, M., & Wright, M. (2018). Deep Fingerprinting: Undermining Website Fingerprinting Defenses with Deep Learning. Proc. 2018 ACM SIGSAC CCS, 1928–1943. DOI/URL: https://doi.org/10.1145/3243734.3243768 (arXiv:1801.02265) Accessed: 2026-07-19 · Tier: 1
[RahmanSMGW20]
Rahman, M. S., Sirinam, P., Mathews, N., Gangadhara, K. G., & Wright, M. (2020). Tik-Tok: The Utility of Packet Timing in Website Fingerprinting Attacks. Proc. on Privacy Enhancing Technologies (PoPETs) 2020(3). DOI/URL: https://doi.org/10.2478/popets-2020-0043 (arXiv:1902.06421) Accessed: 2026-07-19 · Tier: 1
[MurdochD05]
Murdoch, S. J., & Danezis, G. (2005). Low-Cost Traffic Analysis of Tor. 2005 IEEE Symposium on Security and Privacy, 183–195. DOI/URL: https://doi.org/10.1109/SP.2005.12 Accessed: 2026-07-19 · Tier: 1
C. Anonymity-set / entropy metrics, decentralized directory, Sybil (RQ2)
[Serjantov2002]
Serjantov, A., & Danezis, G. (2002). Towards an Information Theoretic Metric for Anonymity. Privacy Enhancing Technologies (PET 2002), LNCS 2482, 41–53. Springer. DOI/URL: https://doi.org/10.1007/3-540-36467-6_4 Accessed: 2026-07-19 · Tier: 1
[Diaz2002]
Díaz, C., Seys, S., Claessens, J., & Preneel, B. (2002). Towards Measuring Anonymity. Privacy Enhancing Technologies (PET 2002), LNCS 2482, 54–68. Springer. DOI/URL: https://doi.org/10.1007/3-540-36467-6_5 Accessed: 2026-07-19 · Tier: 1
[Freedman2002]
Freedman, M. J., & Morris, R. (2002). Tarzan: A Peer-to-Peer Anonymizing Network Layer. Proc. 9th ACM CCS, 193–206. DOI/URL: https://doi.org/10.1145/586110.586137 Accessed: 2026-07-19 · Tier: 1
[Mittal2011]
Mittal, P., Olumofin, F. G., Troncoso, C., Borisov, N., & Goldberg, I. (2011). PIR-Tor: Scalable Anonymous Communication Using Private Information Retrieval. 20th USENIX Security Symposium. DOI/URL: https://www.usenix.org/conference/usenix-security-11/pir-tor-scalable-anonymous-communication-using-private-information Accessed: 2026-07-19 · Tier: 1
[Douceur2002]
Douceur, J. R. (2002). The Sybil Attack. 1st Int'l Workshop on Peer-to-Peer Systems (IPTPS), LNCS 2429, 251–260. Springer. DOI/URL: https://doi.org/10.1007/3-540-45748-8_24 Accessed: 2026-07-19 · Tier: 1
[Danezis2003]
Danezis, G. (2003). Statistical Disclosure Attacks: Traffic Confirmation in Open Environments. Security and Privacy in the Age of Uncertainty (IFIP SEC 2003). (companion: Danezis & Serjantov, Information Hiding 2004, LNCS 3200, 293–308, https://doi.org/10.1007/978-3-540-30114-1_21) DOI/URL: https://www.freehaven.net/anonbib/cache/statistical-disclosure.pdf Accessed: 2026-07-19 · Tier: 2
[Winter2016]
Winter, P., Ensafi, R., Loesing, K., & Feamster, N. (2016). Identifying and Characterizing Sybils in the Tor Network. 25th USENIX Security Symposium, 1169–1185. DOI/URL: https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/winter (arXiv:1602.07787) Accessed: 2026-07-19 · Tier: 1
D. Path selection, churn, learning-driven routing (RQ3)
[Snader2008]
Snader, R., & Borisov, N. (2008). A Tune-up for Tor: Improving Security and Performance in the Tor Network. Network and Distributed System Security Symposium (NDSS). DOI/URL: https://www.ndss-symposium.org/ndss2008/a-tune-up-for-tor-improving-security-and-performance-in-the-tor-network/ Accessed: 2026-07-19 · Tier: 1
[Akhoondi2012]
Akhoondi, M., Yu, C., & Madhyastha, H. V. (2012). LASTor: A Low-Latency AS-Aware Tor Client. 2012 IEEE Symposium on Security and Privacy, 476–490. DOI/URL: https://doi.org/10.1109/SP.2012.35 Accessed: 2026-07-19 · Tier: 1
[Imani2017]
Imani, M., Amirabadi, M., & Wright, M. (2017). The Evaluation of Circuit Selection Methods on Tor. arXiv preprint arXiv:1706.06457. DOI/URL: https://arxiv.org/abs/1706.06457 Accessed: 2026-07-19 · Tier: 2 (preprint)
[Stutzbach2006]
Stutzbach, D., & Rejaie, R. (2006). Understanding Churn in Peer-to-Peer Networks. Proc. 6th ACM SIGCOMM Internet Measurement Conference (IMC), 189–202. DOI/URL: https://doi.org/10.1145/1177080.1177105 Accessed: 2026-07-19 · Tier: 1 · NOTE: abstract publisher-gated; quantitative session-length figures cited from secondary literature, flagged as secondary in the review.
[HassanzadehNazarabadi2019]
Hassanzadeh-Nazarabadi, Y., Küpçü, A., & Özkasap, Ö. (2019). Interlaced: Fully Decentralized Churn Stabilization for Skip Graph-Based DHTs. arXiv:1903.07289 (peer-reviewed: IEEE IPDPS 2021). DOI/URL: https://arxiv.org/abs/1903.07289 Accessed: 2026-07-19 · Tier: 2
[Barton2025]
Barton, A., Walsh, T., Imani, M., Ming, J., & Wright, M. (2025). PredicTor: A Global, Machine Learning Approach to Tor Path Selection. ACM Transactions on Privacy and Security, 28(3), 1–31. DOI/URL: https://doi.org/10.1145/3723356 Accessed: 2026-07-19 · Tier: 1
[Constantinides2026]
Constantinides, N. (2026). A Traffic Analysis Attack Against Introduction Protocol and Onion Services. arXiv:2602.23560. DOI/URL: https://arxiv.org/abs/2602.23560 Accessed: 2026-07-19 · Tier: 2 (very recent preprint; not load-bearing — corroborate before citing a claim on it)
[Abrol2024]
Abrol, A., Mohan, P. M., & Truong-Huu, T. (2024). A Deep Reinforcement Learning Approach for Adaptive Traffic Routing in Next-gen Networks. arXiv:2402.04515. DOI/URL: https://arxiv.org/abs/2402.04515 Accessed: 2026-07-19 · Tier: 2
F. Friend-to-friend / social-trust / membership-concealing (G4 novelty neighbors)
[Clarke2000]
Clarke, I., Sandberg, O., Wiley, B., & Hong, T. W. (2000/2001). Freenet: A Distributed Anonymous Information Storage and Retrieval System. Designing Privacy Enhancing Technologies, LNCS 2009. DOI/URL: https://doi.org/10.1007/3-540-44702-4_4 Accessed: 2026-07-19 · Tier: 1
[Yu2006]
Yu, H., Kaminsky, M., Gibbons, P. B., & Flaxman, A. (2006). SybilGuard: Defending Against Sybil Attacks via Social Networks. Proc. ACM SIGCOMM 2006, 267–278. DOI/URL: https://doi.org/10.1145/1159913.1159945 Accessed: 2026-07-19 · Tier: 1
[Vasserman2009]
Vasserman, E. Y., Jansen, R., Tyra, J., Hopper, N., & Kim, Y. (2009). Membership-Concealing Overlay Networks. Proc. 16th ACM CCS, 390–399. DOI/URL: https://doi.org/10.1145/1653662.1653709 Accessed: 2026-07-19 · Tier: 1
[Danezis2010]
Danezis, G., Díaz, C., Troncoso, C., & Laurie, B. (2010). Drac: An Architecture for Anonymous Low-Volume Communications. Privacy Enhancing Technologies (PETS 2010), LNCS 6205, 202–219. DOI/URL: https://doi.org/10.1007/978-3-642-14527-8_12 Accessed: 2026-07-19 · Tier: 1
[Mittal2012]
Mittal, P., Wright, M., & Borisov, N. (2012). Pisces: Anonymous Communication Using Social Networks. arXiv:1208.6326 [cs.CR] (NDSS 2013). DOI/URL: https://arxiv.org/abs/1208.6326 Accessed: 2026-07-19 · Tier: 2
[Mittal2012b]
Mittal, P., Caesar, M., & Borisov, N. (2012). X-Vine: Secure and Pseudonymous Routing in DHTs Using Social Networks. NDSS 2012. DOI/URL: https://arxiv.org/abs/1109.0971 Accessed: 2026-07-19 · Tier: 1
[Zhou2011]
Zhou, P., Luo, X., Chen, A., & Chang, R. K. C. (2011/2013). STor: Social Network based Anonymous Communication in Tor. arXiv:1110.5794 [cs.CR]. DOI/URL: https://arxiv.org/abs/1110.5794 Accessed: 2026-07-19 · Tier: 2
Provenance note
Verification methods per source recorded in sor-consent-search-log.md. Two integrity flags carried
forward: [Stutzbach2006] numbers are secondary-sourced; [Constantinides2026] is a Feb-2026 preprint to
re-confirm before any load-bearing citation.