leetcrypt
8f30be186c
Make a clean clone reproducible without a sci-method checkout: - vendor the frozen pre-registration (docs/prereg/, pinned SHA-256 f22331a7… unchanged) and the 36-source bibliography into the repo - confirmatory_run.py resolves the in-repo prereg first, falling back to the canonical sci-method path; the SHA gate is identical (the pin, not the path, is the guarantee) - add REPRODUCE.md: tiered clone→env→seed→run→analyze checklist, honest about the isolated-engine containment rule and the 1.2 GB raw data that is not committed Defensive-measurement instrument; no change to measured behavior. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
254 lines
11 KiB
Markdown
254 lines
11 KiB
Markdown
# Bibliography — sor-consent
|
||
|
||
Slug: `sor-consent` · Stage 01 · Compiled 2026-07-19 · Format per `_config/citations.md`
|
||
36 sources. Every entry verified via ≥1 of: Semantic Scholar, arXiv, Crossref, DBLP, or full-PDF
|
||
extraction. No entry asserted from title alone. Access date 2026-07-19 unless noted.
|
||
|
||
---
|
||
|
||
## A. Onion-routing foundations & nested-tunnel transport
|
||
|
||
### [Chaum1981]
|
||
Chaum, D. L. (1981). Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms.
|
||
*Communications of the ACM*, 24(2), 84–90.
|
||
DOI/URL: https://doi.org/10.1145/358549.358563
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Reed1997]
|
||
Reed, M. G., Syverson, P. F., & Goldschlag, D. M. (1997). Anonymous Connections and Onion Routing.
|
||
*Proc. 1997 IEEE Symposium on Security and Privacy*, 44–54.
|
||
DOI/URL: https://doi.org/10.1109/secpri.1997.601314
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Dingledine2004]
|
||
Dingledine, R., Mathewson, N., & Syverson, P. (2004). Tor: The Second-Generation Onion Router.
|
||
*Proc. 13th USENIX Security Symposium*.
|
||
DOI/URL: https://www.usenix.org/conference/13th-usenix-security-symposium/tor-second-generation-onion-router
|
||
(DTIC report DOI: https://doi.org/10.21236/ada465464) · Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Egners2012]
|
||
Egners, A., Gatzen, D., Panchenko, A., & Meyer, U. (2012). Introducing SOR: SSH-based Onion Routing.
|
||
*Proc. 2012 26th Int'l Conf. on Advanced Information Networking and Applications Workshops (WAINA)*,
|
||
280–286. [IEEE Xplore doc 6185136]
|
||
DOI/URL: https://doi.org/10.1109/WAINA.2012.89
|
||
Accessed: 2026-07-19 · Tier: 1 ← **direct prior art (SOR)**
|
||
|
||
### [Honda2005]
|
||
Honda, O., Ohsaki, H., Imase, M., Ishizuka, M., & Murayama, J. (2005). Understanding TCP over TCP:
|
||
Effects of TCP Tunneling on End-to-End Throughput and Latency. *SPIE Proc. Vol. 6011* (Optics East).
|
||
DOI/URL: https://doi.org/10.1117/12.630496
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Michel2023]
|
||
Michel, F., & Bonaventure, O. (2023). Towards SSH3: How HTTP/3 Improves Secure Shells.
|
||
*arXiv preprint* arXiv:2312.08396 [cs.NI]. (impl: github.com/francoismichel/ssh3)
|
||
DOI/URL: https://arxiv.org/abs/2312.08396
|
||
Accessed: 2026-07-19 · Tier: 2 (preprint)
|
||
|
||
### [AlAzad2023]
|
||
Al Azad, M. W., Zahan, H., Taki, S. U., & Mastorakis, S. (2023). DarkHorse: A UDP-based Framework to
|
||
Improve the Latency of Tor Onion Services. *Proc. 48th IEEE Conf. on Local Computer Networks (LCN)*.
|
||
DOI/URL: https://arxiv.org/abs/2307.02429
|
||
Accessed: 2026-07-19 · Tier: 1 (conf.; arXiv copy)
|
||
|
||
---
|
||
|
||
## B. Traffic correlation / flow-linkability (RQ1)
|
||
|
||
### [NasrBH18]
|
||
Nasr, M., Bahramali, A., & Houmansadr, A. (2018). DeepCorr: Strong Flow Correlation Attacks on Tor
|
||
Using Deep Learning. *Proc. 2018 ACM SIGSAC CCS*, 1962–1976.
|
||
DOI/URL: https://doi.org/10.1145/3243734.3243824 (arXiv:1808.07285)
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [OhYMH22]
|
||
Oh, S. E., Yang, T., Mathews, N., Holland, J. K., Rahman, M. S., Hopper, N., & Wright, M. (2022).
|
||
DeepCoFFEA: Improved Flow Correlation Attacks on Tor via Metric Learning and Amplification.
|
||
*43rd IEEE Symposium on Security and Privacy (S&P)*, 1915–1932.
|
||
DOI/URL: https://doi.org/10.1109/SP46214.2022.9833801
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [SunEVLRCM15]
|
||
Sun, Y., Edmundson, A., Vanbever, L., Li, O., Rexford, J., Chiang, M., & Mittal, P. (2015). RAPTOR:
|
||
Routing Attacks on Privacy in Tor. *24th USENIX Security Symposium*, 271–286.
|
||
DOI/URL: https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/sun (arXiv:1503.03940)
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [JohnsonWJSS13]
|
||
Johnson, A., Wacek, C., Jansen, R., Sherr, M., & Syverson, P. (2013). Users Get Routed: Traffic
|
||
Correlation on Tor by Realistic Adversaries. *Proc. 2013 ACM SIGSAC CCS*, 337–348.
|
||
DOI/URL: https://doi.org/10.1145/2508859.2516651
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [SirinamIJW18]
|
||
Sirinam, P., Imani, M., Juarez, M., & Wright, M. (2018). Deep Fingerprinting: Undermining Website
|
||
Fingerprinting Defenses with Deep Learning. *Proc. 2018 ACM SIGSAC CCS*, 1928–1943.
|
||
DOI/URL: https://doi.org/10.1145/3243734.3243768 (arXiv:1801.02265)
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [RahmanSMGW20]
|
||
Rahman, M. S., Sirinam, P., Mathews, N., Gangadhara, K. G., & Wright, M. (2020). Tik-Tok: The Utility
|
||
of Packet Timing in Website Fingerprinting Attacks. *Proc. on Privacy Enhancing Technologies (PoPETs)*
|
||
2020(3).
|
||
DOI/URL: https://doi.org/10.2478/popets-2020-0043 (arXiv:1902.06421)
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [MurdochD05]
|
||
Murdoch, S. J., & Danezis, G. (2005). Low-Cost Traffic Analysis of Tor. *2005 IEEE Symposium on
|
||
Security and Privacy*, 183–195.
|
||
DOI/URL: https://doi.org/10.1109/SP.2005.12
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
---
|
||
|
||
## C. Anonymity-set / entropy metrics, decentralized directory, Sybil (RQ2)
|
||
|
||
### [Serjantov2002]
|
||
Serjantov, A., & Danezis, G. (2002). Towards an Information Theoretic Metric for Anonymity.
|
||
*Privacy Enhancing Technologies (PET 2002)*, LNCS 2482, 41–53. Springer.
|
||
DOI/URL: https://doi.org/10.1007/3-540-36467-6_4
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Diaz2002]
|
||
Díaz, C., Seys, S., Claessens, J., & Preneel, B. (2002). Towards Measuring Anonymity.
|
||
*Privacy Enhancing Technologies (PET 2002)*, LNCS 2482, 54–68. Springer.
|
||
DOI/URL: https://doi.org/10.1007/3-540-36467-6_5
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Freedman2002]
|
||
Freedman, M. J., & Morris, R. (2002). Tarzan: A Peer-to-Peer Anonymizing Network Layer.
|
||
*Proc. 9th ACM CCS*, 193–206.
|
||
DOI/URL: https://doi.org/10.1145/586110.586137
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Mittal2011]
|
||
Mittal, P., Olumofin, F. G., Troncoso, C., Borisov, N., & Goldberg, I. (2011). PIR-Tor: Scalable
|
||
Anonymous Communication Using Private Information Retrieval. *20th USENIX Security Symposium*.
|
||
DOI/URL: https://www.usenix.org/conference/usenix-security-11/pir-tor-scalable-anonymous-communication-using-private-information
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Douceur2002]
|
||
Douceur, J. R. (2002). The Sybil Attack. *1st Int'l Workshop on Peer-to-Peer Systems (IPTPS)*,
|
||
LNCS 2429, 251–260. Springer.
|
||
DOI/URL: https://doi.org/10.1007/3-540-45748-8_24
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Danezis2003]
|
||
Danezis, G. (2003). Statistical Disclosure Attacks: Traffic Confirmation in Open Environments.
|
||
*Security and Privacy in the Age of Uncertainty (IFIP SEC 2003)*. (companion: Danezis & Serjantov,
|
||
*Information Hiding 2004*, LNCS 3200, 293–308, https://doi.org/10.1007/978-3-540-30114-1_21)
|
||
DOI/URL: https://www.freehaven.net/anonbib/cache/statistical-disclosure.pdf
|
||
Accessed: 2026-07-19 · Tier: 2
|
||
|
||
### [Winter2016]
|
||
Winter, P., Ensafi, R., Loesing, K., & Feamster, N. (2016). Identifying and Characterizing Sybils in
|
||
the Tor Network. *25th USENIX Security Symposium*, 1169–1185.
|
||
DOI/URL: https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/winter (arXiv:1602.07787)
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
---
|
||
|
||
## D. Path selection, churn, learning-driven routing (RQ3)
|
||
|
||
### [Snader2008]
|
||
Snader, R., & Borisov, N. (2008). A Tune-up for Tor: Improving Security and Performance in the Tor
|
||
Network. *Network and Distributed System Security Symposium (NDSS)*.
|
||
DOI/URL: https://www.ndss-symposium.org/ndss2008/a-tune-up-for-tor-improving-security-and-performance-in-the-tor-network/
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Akhoondi2012]
|
||
Akhoondi, M., Yu, C., & Madhyastha, H. V. (2012). LASTor: A Low-Latency AS-Aware Tor Client.
|
||
*2012 IEEE Symposium on Security and Privacy*, 476–490.
|
||
DOI/URL: https://doi.org/10.1109/SP.2012.35
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Imani2017]
|
||
Imani, M., Amirabadi, M., & Wright, M. (2017). The Evaluation of Circuit Selection Methods on Tor.
|
||
*arXiv preprint* arXiv:1706.06457.
|
||
DOI/URL: https://arxiv.org/abs/1706.06457
|
||
Accessed: 2026-07-19 · Tier: 2 (preprint)
|
||
|
||
### [Stutzbach2006]
|
||
Stutzbach, D., & Rejaie, R. (2006). Understanding Churn in Peer-to-Peer Networks. *Proc. 6th ACM
|
||
SIGCOMM Internet Measurement Conference (IMC)*, 189–202.
|
||
DOI/URL: https://doi.org/10.1145/1177080.1177105
|
||
Accessed: 2026-07-19 · Tier: 1 · NOTE: abstract publisher-gated; quantitative session-length figures
|
||
cited from secondary literature, flagged as secondary in the review.
|
||
|
||
### [HassanzadehNazarabadi2019]
|
||
Hassanzadeh-Nazarabadi, Y., Küpçü, A., & Özkasap, Ö. (2019). Interlaced: Fully Decentralized Churn
|
||
Stabilization for Skip Graph-Based DHTs. *arXiv:1903.07289* (peer-reviewed: IEEE IPDPS 2021).
|
||
DOI/URL: https://arxiv.org/abs/1903.07289
|
||
Accessed: 2026-07-19 · Tier: 2
|
||
|
||
### [Barton2025]
|
||
Barton, A., Walsh, T., Imani, M., Ming, J., & Wright, M. (2025). PredicTor: A Global, Machine Learning
|
||
Approach to Tor Path Selection. *ACM Transactions on Privacy and Security*, 28(3), 1–31.
|
||
DOI/URL: https://doi.org/10.1145/3723356
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Constantinides2026]
|
||
Constantinides, N. (2026). A Traffic Analysis Attack Against Introduction Protocol and Onion Services.
|
||
*arXiv:2602.23560*.
|
||
DOI/URL: https://arxiv.org/abs/2602.23560
|
||
Accessed: 2026-07-19 · Tier: 2 (very recent preprint; not load-bearing — corroborate before citing a claim on it)
|
||
|
||
### [Abrol2024]
|
||
Abrol, A., Mohan, P. M., & Truong-Huu, T. (2024). A Deep Reinforcement Learning Approach for Adaptive
|
||
Traffic Routing in Next-gen Networks. *arXiv:2402.04515*.
|
||
DOI/URL: https://arxiv.org/abs/2402.04515
|
||
Accessed: 2026-07-19 · Tier: 2
|
||
|
||
---
|
||
|
||
## F. Friend-to-friend / social-trust / membership-concealing (G4 novelty neighbors)
|
||
|
||
### [Clarke2000]
|
||
Clarke, I., Sandberg, O., Wiley, B., & Hong, T. W. (2000/2001). Freenet: A Distributed Anonymous
|
||
Information Storage and Retrieval System. *Designing Privacy Enhancing Technologies*, LNCS 2009.
|
||
DOI/URL: https://doi.org/10.1007/3-540-44702-4_4
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Yu2006]
|
||
Yu, H., Kaminsky, M., Gibbons, P. B., & Flaxman, A. (2006). SybilGuard: Defending Against Sybil
|
||
Attacks via Social Networks. *Proc. ACM SIGCOMM 2006*, 267–278.
|
||
DOI/URL: https://doi.org/10.1145/1159913.1159945
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Vasserman2009]
|
||
Vasserman, E. Y., Jansen, R., Tyra, J., Hopper, N., & Kim, Y. (2009). Membership-Concealing Overlay
|
||
Networks. *Proc. 16th ACM CCS*, 390–399.
|
||
DOI/URL: https://doi.org/10.1145/1653662.1653709
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Danezis2010]
|
||
Danezis, G., Díaz, C., Troncoso, C., & Laurie, B. (2010). Drac: An Architecture for Anonymous
|
||
Low-Volume Communications. *Privacy Enhancing Technologies (PETS 2010)*, LNCS 6205, 202–219.
|
||
DOI/URL: https://doi.org/10.1007/978-3-642-14527-8_12
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Mittal2012]
|
||
Mittal, P., Wright, M., & Borisov, N. (2012). Pisces: Anonymous Communication Using Social Networks.
|
||
*arXiv:1208.6326* [cs.CR] (NDSS 2013).
|
||
DOI/URL: https://arxiv.org/abs/1208.6326
|
||
Accessed: 2026-07-19 · Tier: 2
|
||
|
||
### [Mittal2012b]
|
||
Mittal, P., Caesar, M., & Borisov, N. (2012). X-Vine: Secure and Pseudonymous Routing in DHTs Using
|
||
Social Networks. *NDSS 2012*.
|
||
DOI/URL: https://arxiv.org/abs/1109.0971
|
||
Accessed: 2026-07-19 · Tier: 1
|
||
|
||
### [Zhou2011]
|
||
Zhou, P., Luo, X., Chen, A., & Chang, R. K. C. (2011/2013). STor: Social Network based Anonymous
|
||
Communication in Tor. *arXiv:1110.5794* [cs.CR].
|
||
DOI/URL: https://arxiv.org/abs/1110.5794
|
||
Accessed: 2026-07-19 · Tier: 2
|
||
|
||
---
|
||
|
||
## Provenance note
|
||
Verification methods per source recorded in `sor-consent-search-log.md`. Two integrity flags carried
|
||
forward: [Stutzbach2006] numbers are secondary-sourced; [Constantinides2026] is a Feb-2026 preprint to
|
||
re-confirm before any load-bearing citation.
|