{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,25]],"date-time":"2026-07-25T16:11:07Z","timestamp":1784995867345,"version":"3.55.0"},"reference-count":124,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"Cyber Security Research Centre Limited (CSCRC) through the Australian Government\u2019s Cooperative Research Centres Programme"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Commun. Surv. Tutorials"],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/comst.2021.3093615","type":"journal-article","created":{"date-parts":[[2021,7,2]],"date-time":"2021-07-02T19:59:11Z","timestamp":1625255951000},"page":"2324-2350","source":"Crossref","is-referenced-by-count":78,"title":["De-Anonymisation Attacks on Tor: A Survey"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5349-4943","authenticated-orcid":false,"given":"Ishan","family":"Karunanayake","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8169-040X","authenticated-orcid":false,"given":"Nadeem","family":"Ahmed","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9672-5601","authenticated-orcid":false,"given":"Robert","family":"Malaney","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8317-5727","authenticated-orcid":false,"given":"Rafiqul","family":"Islam","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1844-1520","authenticated-orcid":false,"given":"Sanjay K.","family":"Jha","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.14569\/IJACSA.2018.090815"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2015.7081076"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180410"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.24"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-35691-4_40"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/1042031.1042032"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653708"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.15"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23288"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/1655008.1655013"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-27809-2_25"},{"key":"ref27","first-page":"171","article-title":"Fingerprinting Websites using traffic analysis","author":"hintz","year":"2002","journal-title":"Proc 2nd Int Workshop Privacy Enhanc Technol"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.12"},{"key":"ref20","year":"2013","journal-title":"The Lifecycle of a New Relay"},{"key":"ref22","first-page":"v4-634","article-title":"Research on Diffie-Hellman key exchange protocol","author":"li","year":"2010","journal-title":"Proc 2nd Int Conf Comput Eng Technol"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2013.07.031"},{"key":"ref24","author":"mathewson","year":"2012","journal-title":"Top Changes in Tor Since the 2004 Design Paper (Part 1)"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2013.6566894"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046732"},{"key":"ref26","author":"murdoch","year":"2012","journal-title":"Top Changes in Tor Since the 2004 Design Paper (Part 1)"},{"key":"ref100","first-page":"1","article-title":"On the optimal path length for Tor","author":"bauer","year":"2010","journal-title":"Proc HotPets Conjunct 10th Int Symp Privacy Enhanc Technol (PETS)"},{"key":"ref25","author":"mathewson","year":"2012","journal-title":"Top Changes in Tor Since the 2004 Design Paper (Part 1)"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ELECSYM.2016.7861018"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2012.6195627"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/1314333.1314336"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2016.2604405"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31680-7_6"},{"key":"ref56","first-page":"207","article-title":"On flow correlation attacks and countermeasures in mix networks","author":"zhu","year":"2004","journal-title":"Proc 4th Int Workshop Privacy Enhanc Technol"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2018-0011"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.14257\/ijsia.2015.9.11.36"},{"key":"ref53","first-page":"1169","article-title":"Identifying and characterizing sybils in the Tor network","author":"winter","year":"2016","journal-title":"Proc 25th Usenix Security Symp"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.5220\/0006105602530262"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99073-6_25"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/NDSS.1996.492350"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/358549.358563"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.21236\/ADA465464"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2003.1199323"},{"key":"ref8","first-page":"40","article-title":"Terrorist migration to the dark Web","volume":"10","author":"weimann","year":"2016","journal-title":"Perspectives on Terrorism"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-75551-7_8"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2488388.2488408"},{"key":"ref9","author":"salo","year":"2010","journal-title":"Recent Attacks on Tor"},{"key":"ref46","first-page":"1823","article-title":"Point break: A study of bandwidth denial-of-service attacks against Tor","author":"jansen","year":"2019","journal-title":"Proc 28th USENIX Security Symp"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85886-7_11"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2815675.2815690"},{"key":"ref47","first-page":"1","article-title":"How the great firewall of china is blocking Tor","author":"winter","year":"2012","journal-title":"Proc 2nd USENIX Workshop Free Open Commun Internet"},{"key":"ref42","first-page":"1187","article-title":"K-fingerprinting: A robust scalable Website fingerprinting technique","author":"hayes","year":"2016","journal-title":"Proc 25th Usenix Security Symp"},{"key":"ref41","first-page":"271","article-title":"RAPTOR: Routing attacks on privacy in Tor","author":"sun","year":"2011","journal-title":"Proc 18th ACM Conf Comput Commun Security"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40203-6_37"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23477"},{"key":"ref124","author":"laperdrix","year":"2019","journal-title":"Browser Fingerprinting An Introduction and the Challenges Ahead"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-75551-7_11"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/CSCWD.2014.6846826"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2016-0004"},{"key":"ref70","year":"2020","journal-title":"Tor Metrics"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2947666"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/99.388960"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516651"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243824"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/2046556.2046570"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382260"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/PCCC.2009.5403852"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2010.04.007"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-75551-7_12"},{"key":"ref63","first-page":"578","article-title":"One cell is enough to break Tor’s anonymity","author":"fu","year":"2009","journal-title":"Proc Black Hat Tech Security Conf"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2011.2178036"},{"key":"ref65","first-page":"211","article-title":"An improved clock-skew measurement technique for revealing hidden services","author":"zander","year":"2008","journal-title":"Proc 17th USENIX Security Symp"},{"key":"ref66","first-page":"1","article-title":"One bad apple spoils the bunch: Exploiting P2P applications to trace and profile Tor users","author":"le blond","year":"2011","journal-title":"Proc 4th USENIX Workshop Large-Scale Exploits Emergent Threats"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813667"},{"key":"ref68","first-page":"287","article-title":"Circuit fingerprinting attacks: Passive deanonymization of Tor hidden services","author":"kwon","year":"2015","journal-title":"Proc 24th USENIX Security Symp"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1592451.1592456"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.23919\/TST.2017.8195352"},{"key":"ref1","author":"jeffries","year":"2014","journal-title":"The Pentagon Is Trying to Make the Internet More Anonymous"},{"key":"ref109","first-page":"213","article-title":"The DUSTER attack: Tor onion service attribution based on flow watermarking with track hiding","author":"iacovazzi","year":"2019","journal-title":"Proc 22nd Int Symp Res Attacks Intrusions Defenses"},{"key":"ref95","year":"2020","journal-title":"The Tor Project Privacy & freedom online"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2018.8486375"},{"key":"ref94","first-page":"1375","article-title":"Walkie-Talkie: An efficient defense against passive Website fingerprinting attacks","author":"wang","year":"2017","journal-title":"Proc 26th USENIX Security Symp"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-04918-2_24"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45744-4_2"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/SITIS.2008.93"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2020-0013"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15497-3_16"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243768"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.17"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23105"},{"key":"ref103","first-page":"33","article-title":"A practical congestion attack on Tor using long paths","author":"evans","year":"2009","journal-title":"Proc 18th USENIX Security Symp"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1145\/1698750.1698753"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCSW.2013.29"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2017-0018"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39077-7_9"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2714627"},{"key":"ref99","author":"finkel","year":"2018","journal-title":"New Alpha Release Tor Browser for Android"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1561\/9781680833119"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.05.018"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2946802"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2018.04.002"},{"key":"ref12","first-page":"1","article-title":"Darknet security: A categorization of attacks to the Tor network","author":"cambiaso","year":"2019","journal-title":"Proc 3rd Ital Conf Cyber Security"},{"key":"ref13","author":"evers","year":"2016","journal-title":"Thirteen Years of Tor Attacks"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2453434"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICOIN.2015.7057949"},{"key":"ref118","author":"lewman","year":"2014","journal-title":"Quick Summary of Recent Traffic Correlation Using Netflows"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICIoT48696.2020.9089497"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/2517840.2517851"},{"key":"ref117","author":"dingledine","year":"2014","journal-title":"Traffic Correlation Using Netflows"},{"key":"ref17","first-page":"401","article-title":"I2P data communication system","author":"zantout","year":"2011","journal-title":"Proc 10th IEEE Int Conf Netw"},{"key":"ref81","author":"perry","year":"2011","journal-title":"Experimental defense for website traffic fingerprinting"},{"key":"ref18","first-page":"46","article-title":"FreeNet: A distributed anonymous information storage and retrieval system","author":"clarke","year":"2000","journal-title":"Proc Int Workshop Design Issues Anonymity Unobservability"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/3139550.3139564"},{"key":"ref119","author":"dingledine","year":"2015","journal-title":"A technical Summary of the Usenix Fingerprinting Paper"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/293411.293443"},{"key":"ref83","first-page":"143","article-title":"Effective attacks and provable defenses for Website fingerprinting","author":"wang","year":"2014","journal-title":"Proc 23rd USENIX Security Symp"},{"key":"ref114","first-page":"2021","article-title":"How unique is your.onion? An analysis of the fingerprintability of Tor onion services","author":"overdorf","year":"2017","journal-title":"Proc ACM SIGSAC Conf Comput Commun Security"},{"key":"ref113","year":"2014","journal-title":"Europol Global action against dark markets on Tor network"},{"key":"ref116","year":"2018","journal-title":"Reporting Bad Relays"},{"key":"ref80","first-page":"1","article-title":"HTTPOS: Sealing information leaks with browser-side obfuscation of encrypted flows","author":"luo","year":"2011","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref115","author":"dingledine","year":"2014","journal-title":"Tor Security Advisory ‘Relay Early’ Traffic Confirmation Attack"},{"key":"ref120","author":"perry","year":"2020","journal-title":"Tor Padding Specification"},{"key":"ref89","first-page":"1","article-title":"The effect of DNS on Tor’s anonymity","author":"greschbach","year":"2017","journal-title":"Proc 24th Annu Netw Distrib Syst Security Symp"},{"key":"ref121","author":"lewman","year":"2014","journal-title":"Thoughts and Concerns about Operation Onymous"},{"key":"ref122","author":"kadianakis","year":"2018","journal-title":"Announcing the vanguards add-on for onion services"},{"key":"ref123","author":"perry","year":"2019","journal-title":"New Low Cost Traffic Analysis Attacks and Mitigations"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660368"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134074"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511794308"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2762825"}],"container-title":["IEEE Communications Surveys & Tutorials"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9739\/9621320\/09471821.pdf?arnumber=9471821","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,2,28]],"date-time":"2022-02-28T21:35:54Z","timestamp":1646084154000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9471821\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":124,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/comst.2021.3093615","relation":{},"ISSN":["1553-877X","2373-745X"],"issn-type":[{"value":"1553-877X","type":"electronic"},{"value":"2373-745X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}