ParTEETor: A System for Partial Deployments of TEEs within Tor Article Swipe

PDF

Rachel King , Quinn Burke , Yohan Beugin , Blaine Hoak , Kunyang Li , Eric Pauley , Ryan Sheatsley , Patrick McDaniel ·

YOU? · · 2024 · Open Access · · DOI: https://doi.org/10.48550/arxiv.2408.14646

The Tor anonymity network allows users such as political activists and those under repressive governments to protect their privacy when communicating over the internet. At the same time, Tor has been demonstrated to be vulnerable to several classes of deanonymizing attacks that expose user behavior and identities. Prior work has shown that these threats can be mitigated by leveraging trusted execution environments (TEEs). However, previous proposals assume that all relays in the network will be TEE-based-which as a practical matter is unrealistic. In this work, we introduce ParTEETor, a Tor-variant system, which leverages partial deployments of TEEs to thwart known attacks. We study two modes of operation: non-policy and policy. Non-policy mode uses the existing Tor relay selection algorithm to provide users incident security. Policy mode extends the relay selection algorithm to address the classes of attacks by enforcing a specific TEE circuit configuration. We evaluate ParTEETor for security, performance, and privacy. Our evaluation demonstrates that at even a small TEE penetration (e.g., 10% of relays are TEE-based), users can reach performance of Tor today while enforcing a security policy to guarantee protection from at least two classes of attacks. Overall, we find that partial deployments of TEEs can substantially improve the security of Tor, without a significant impact on performance or privacy.

Related Topics

Geography

Concepts

Geography

Metadata

Type: preprint
Language: en
Landing Page: http://arxiv.org/abs/2408.14646
PDF: https://arxiv.org/pdf/2408.14646
OA Status: green
Related Works: 10
OpenAlex ID: https://openalex.org/W4402704311

All OpenAlex metadata

Raw OpenAlex JSON

OpenAlex ID: https://openalex.org/W4402704311

Canonical identifier for this work in OpenAlex
DOI: https://doi.org/10.48550/arxiv.2408.14646

Digital Object Identifier
Title: ParTEETor: A System for Partial Deployments of TEEs within Tor

Work title
Type: preprint

OpenAlex work type
Language: en

Primary language
Publication year: 2024

Year of publication
Publication date: 2024-08-26

Full publication date if available
Authors: Rachel King, Quinn Burke, Yohan Beugin, Blaine Hoak, Kunyang Li, Eric Pauley, Ryan Sheatsley, Patrick McDaniel

List of authors in order
Landing page: https://arxiv.org/abs/2408.14646

Publisher landing page
PDF URL: https://arxiv.org/pdf/2408.14646

Direct link to full text PDF
Open access: Yes

Whether a free full text is available
OA status: green

Open access status per OpenAlex
OA URL: https://arxiv.org/pdf/2408.14646

Direct OA link when available
Concepts: Geography

Top concepts (fields/topics) attached by OpenAlex
Cited by: 0

Total citation count in OpenAlex
Related works (count): 10

Other works algorithmically related by OpenAlex

Full payload

id	https://openalex.org/W4402704311
doi	https://doi.org/10.48550/arxiv.2408.14646
ids.doi	https://doi.org/10.48550/arxiv.2408.14646
ids.openalex	https://openalex.org/W4402704311
fwci
type	preprint
title	ParTEETor: A System for Partial Deployments of TEEs within Tor
biblio.issue
biblio.volume
biblio.last_page
biblio.first_page
topics[0].id	https://openalex.org/T13182
topics[0].field.id	https://openalex.org/fields/17
topics[0].field.display_name	Computer Science
topics[0].score	0.8906000256538391
topics[0].domain.id	https://openalex.org/domains/3
topics[0].domain.display_name	Physical Sciences
topics[0].subfield.id	https://openalex.org/subfields/1703
topics[0].subfield.display_name	Computational Theory and Mathematics
topics[0].display_name	Quantum-Dot Cellular Automata
topics[1].id	https://openalex.org/T12784
topics[1].field.id	https://openalex.org/fields/22
topics[1].field.display_name	Engineering
topics[1].score	0.8646000027656555
topics[1].domain.id	https://openalex.org/domains/3
topics[1].domain.display_name	Physical Sciences
topics[1].subfield.id	https://openalex.org/subfields/2210
topics[1].subfield.display_name	Mechanical Engineering
topics[1].display_name	Modular Robots and Swarm Intelligence
topics[2].id	https://openalex.org/T10502
topics[2].field.id	https://openalex.org/fields/22
topics[2].field.display_name	Engineering
topics[2].score	0.8519999980926514
topics[2].domain.id	https://openalex.org/domains/3
topics[2].domain.display_name	Physical Sciences
topics[2].subfield.id	https://openalex.org/subfields/2208
topics[2].subfield.display_name	Electrical and Electronic Engineering
topics[2].display_name	Advanced Memory and Neural Computing
is_xpac	False
apc_list
apc_paid
concepts[0].id	https://openalex.org/C205649164
concepts[0].level	0
concepts[0].score	0.31417423486709595
concepts[0].wikidata	https://www.wikidata.org/wiki/Q1071
concepts[0].display_name	Geography
keywords[0].id	https://openalex.org/keywords/geography
keywords[0].score	0.31417423486709595
keywords[0].display_name	Geography
language	en
locations[0].id	pmh:oai:arXiv.org:2408.14646
locations[0].is_oa	True
locations[0].source.id	https://openalex.org/S4306400194
locations[0].source.issn
locations[0].source.type	repository
locations[0].source.is_oa	True
locations[0].source.issn_l
locations[0].source.is_core	False
locations[0].source.is_in_doaj	False
locations[0].source.display_name	arXiv (Cornell University)
locations[0].source.host_organization	https://openalex.org/I205783295
locations[0].source.host_organization_name	Cornell University
locations[0].source.host_organization_lineage	https://openalex.org/I205783295
locations[0].license	cc-by
locations[0].pdf_url	https://arxiv.org/pdf/2408.14646
locations[0].version	submittedVersion
locations[0].raw_type	text
locations[0].license_id	https://openalex.org/licenses/cc-by
locations[0].is_accepted	False
locations[0].is_published	False
locations[0].raw_source_name
locations[0].landing_page_url	http://arxiv.org/abs/2408.14646
locations[1].id	doi:10.48550/arxiv.2408.14646
locations[1].is_oa	True
locations[1].source.id	https://openalex.org/S4306400194
locations[1].source.issn
locations[1].source.type	repository
locations[1].source.is_oa	True
locations[1].source.issn_l
locations[1].source.is_core	False
locations[1].source.is_in_doaj	False
locations[1].source.display_name	arXiv (Cornell University)
locations[1].source.host_organization	https://openalex.org/I205783295
locations[1].source.host_organization_name	Cornell University
locations[1].source.host_organization_lineage	https://openalex.org/I205783295
locations[1].license	cc-by
locations[1].pdf_url
locations[1].version
locations[1].raw_type	article
locations[1].license_id	https://openalex.org/licenses/cc-by
locations[1].is_accepted	False
locations[1].is_published
locations[1].raw_source_name
locations[1].landing_page_url	https://doi.org/10.48550/arxiv.2408.14646
indexed_in	arxiv, datacite
authorships[0].author.id	https://openalex.org/A5068922933
authorships[0].author.orcid	https://orcid.org/0000-0002-0085-3498
authorships[0].author.display_name	Rachel King
authorships[0].author_position	first
authorships[0].raw_author_name	King, Rachel
authorships[0].is_corresponding	False
authorships[1].author.id	https://openalex.org/A5084426434
authorships[1].author.orcid	https://orcid.org/0000-0002-9217-5128
authorships[1].author.display_name	Quinn Burke
authorships[1].author_position	middle
authorships[1].raw_author_name	Burke, Quinn
authorships[1].is_corresponding	False
authorships[2].author.id	https://openalex.org/A5007771274
authorships[2].author.orcid	https://orcid.org/0000-0003-0991-7926
authorships[2].author.display_name	Yohan Beugin
authorships[2].author_position	middle
authorships[2].raw_author_name	Beugin, Yohan
authorships[2].is_corresponding	False
authorships[3].author.id	https://openalex.org/A5088915686
authorships[3].author.orcid	https://orcid.org/0000-0003-2960-0686
authorships[3].author.display_name	Blaine Hoak
authorships[3].author_position	middle
authorships[3].raw_author_name	Hoak, Blaine
authorships[3].is_corresponding	False
authorships[4].author.id	https://openalex.org/A5107570217
authorships[4].author.orcid	https://orcid.org/0009-0007-4264-855X
authorships[4].author.display_name	Kunyang Li
authorships[4].author_position	middle
authorships[4].raw_author_name	Li, Kunyang
authorships[4].is_corresponding	False
authorships[5].author.id	https://openalex.org/A5023371126
authorships[5].author.orcid	https://orcid.org/0000-0002-2197-9137
authorships[5].author.display_name	Eric Pauley
authorships[5].author_position	middle
authorships[5].raw_author_name	Pauley, Eric
authorships[5].is_corresponding	False
authorships[6].author.id	https://openalex.org/A5056794879
authorships[6].author.orcid	https://orcid.org/0000-0001-8447-602X
authorships[6].author.display_name	Ryan Sheatsley
authorships[6].author_position	middle
authorships[6].raw_author_name	Sheatsley, Ryan
authorships[6].is_corresponding	False
authorships[7].author.id	https://openalex.org/A5055368149
authorships[7].author.orcid	https://orcid.org/0000-0003-2091-7484
authorships[7].author.display_name	Patrick McDaniel
authorships[7].author_position	last
authorships[7].raw_author_name	McDaniel, Patrick
authorships[7].is_corresponding	False
has_content.pdf	True
has_content.grobid_xml	True
is_paratext	False
open_access.is_oa	True
open_access.oa_url	https://arxiv.org/pdf/2408.14646
open_access.oa_status	green
open_access.any_repository_has_fulltext	False
created_date	2025-10-10T00:00:00
display_name	ParTEETor: A System for Partial Deployments of TEEs within Tor
has_fulltext	True
is_retracted	False
updated_date	2025-11-06T06:51:31.235846
primary_topic.id	https://openalex.org/T13182
primary_topic.field.id	https://openalex.org/fields/17
primary_topic.field.display_name	Computer Science
primary_topic.score	0.8906000256538391
primary_topic.domain.id	https://openalex.org/domains/3
primary_topic.domain.display_name	Physical Sciences
primary_topic.subfield.id	https://openalex.org/subfields/1703
primary_topic.subfield.display_name	Computational Theory and Mathematics
primary_topic.display_name	Quantum-Dot Cellular Automata
related_works	https://openalex.org/W2748952813, https://openalex.org/W3120165752, https://openalex.org/W3158585187, https://openalex.org/W2344506138, https://openalex.org/W1964191721, https://openalex.org/W2485179383, https://openalex.org/W4211064241, https://openalex.org/W3195275078, https://openalex.org/W2073705106, https://openalex.org/W4237393413
cited_by_count	0
locations_count	2
best_oa_location.id	pmh:oai:arXiv.org:2408.14646
best_oa_location.is_oa	True
best_oa_location.source.id	https://openalex.org/S4306400194
best_oa_location.source.issn
best_oa_location.source.type	repository
best_oa_location.source.is_oa	True
best_oa_location.source.issn_l
best_oa_location.source.is_core	False
best_oa_location.source.is_in_doaj	False
best_oa_location.source.display_name	arXiv (Cornell University)
best_oa_location.source.host_organization	https://openalex.org/I205783295
best_oa_location.source.host_organization_name	Cornell University
best_oa_location.source.host_organization_lineage	https://openalex.org/I205783295
best_oa_location.license	cc-by
best_oa_location.pdf_url	https://arxiv.org/pdf/2408.14646
best_oa_location.version	submittedVersion
best_oa_location.raw_type	text
best_oa_location.license_id	https://openalex.org/licenses/cc-by
best_oa_location.is_accepted	False
best_oa_location.is_published	False
best_oa_location.raw_source_name
best_oa_location.landing_page_url	http://arxiv.org/abs/2408.14646
primary_location.id	pmh:oai:arXiv.org:2408.14646
primary_location.is_oa	True
primary_location.source.id	https://openalex.org/S4306400194
primary_location.source.issn
primary_location.source.type	repository
primary_location.source.is_oa	True
primary_location.source.issn_l
primary_location.source.is_core	False
primary_location.source.is_in_doaj	False
primary_location.source.display_name	arXiv (Cornell University)
primary_location.source.host_organization	https://openalex.org/I205783295
primary_location.source.host_organization_name	Cornell University
primary_location.source.host_organization_lineage	https://openalex.org/I205783295
primary_location.license	cc-by
primary_location.pdf_url	https://arxiv.org/pdf/2408.14646
primary_location.version	submittedVersion
primary_location.raw_type	text
primary_location.license_id	https://openalex.org/licenses/cc-by
primary_location.is_accepted	False
primary_location.is_published	False
primary_location.raw_source_name
primary_location.landing_page_url	http://arxiv.org/abs/2408.14646
publication_date	2024-08-26
publication_year	2024
referenced_works_count	0
abstract_inverted_index.a	77, 88, 139, 158, 177, 206
abstract_inverted_index.At	24
abstract_inverted_index.In	82
abstract_inverted_index.We	101, 144
abstract_inverted_index.as	7, 76
abstract_inverted_index.at	156, 184
abstract_inverted_index.be	33, 55, 74
abstract_inverted_index.by	57, 137
abstract_inverted_index.in	70
abstract_inverted_index.is	80
abstract_inverted_index.of	38, 95, 105, 135, 164, 172, 188, 196, 203
abstract_inverted_index.on	209
abstract_inverted_index.or	211
abstract_inverted_index.to	15, 32, 35, 97, 119, 131, 180
abstract_inverted_index.we	85, 191
abstract_inverted_index.10%	163
abstract_inverted_index.Our	152
abstract_inverted_index.TEE	141, 160
abstract_inverted_index.The	0
abstract_inverted_index.Tor	1, 28, 115, 173
abstract_inverted_index.all	68
abstract_inverted_index.and	10, 45, 108, 150
abstract_inverted_index.are	166
abstract_inverted_index.can	54, 169, 198
abstract_inverted_index.for	147
abstract_inverted_index.has	29, 49
abstract_inverted_index.the	22, 25, 71, 113, 127, 133, 201
abstract_inverted_index.two	103, 186
abstract_inverted_index.TEEs	96, 197
abstract_inverted_index.Tor,	204
abstract_inverted_index.been	30
abstract_inverted_index.even	157
abstract_inverted_index.find	192
abstract_inverted_index.from	183
abstract_inverted_index.mode	111, 125
abstract_inverted_index.over	21
abstract_inverted_index.same	26
abstract_inverted_index.such	6
abstract_inverted_index.that	41, 51, 67, 155, 193
abstract_inverted_index.this	83
abstract_inverted_index.user	43
abstract_inverted_index.uses	112
abstract_inverted_index.when	19
abstract_inverted_index.will	73
abstract_inverted_index.work	48
abstract_inverted_index.Prior	47
abstract_inverted_index.known	99
abstract_inverted_index.least	185
abstract_inverted_index.modes	104
abstract_inverted_index.reach	170
abstract_inverted_index.relay	116, 128
abstract_inverted_index.shown	50
abstract_inverted_index.small	159
abstract_inverted_index.study	102
abstract_inverted_index.their	17
abstract_inverted_index.these	52
abstract_inverted_index.those	11
abstract_inverted_index.time,	27
abstract_inverted_index.today	174
abstract_inverted_index.under	12
abstract_inverted_index.users	5, 121, 168
abstract_inverted_index.which	91
abstract_inverted_index.while	175
abstract_inverted_index.work,	84
abstract_inverted_index.(e.g.,	162
abstract_inverted_index.Policy	124
abstract_inverted_index.allows	4
abstract_inverted_index.assume	66
abstract_inverted_index.expose	42
abstract_inverted_index.impact	208
abstract_inverted_index.matter	79
abstract_inverted_index.policy	179
abstract_inverted_index.relays	69, 165
abstract_inverted_index.thwart	98
abstract_inverted_index.(TEEs).	62
abstract_inverted_index.address	132
abstract_inverted_index.attacks	40, 136
abstract_inverted_index.circuit	142
abstract_inverted_index.classes	37, 134, 187
abstract_inverted_index.extends	126
abstract_inverted_index.improve	200
abstract_inverted_index.network	3, 72
abstract_inverted_index.partial	93, 194
abstract_inverted_index.policy.	109
abstract_inverted_index.privacy	18
abstract_inverted_index.protect	16
abstract_inverted_index.provide	120
abstract_inverted_index.several	36
abstract_inverted_index.system,	90
abstract_inverted_index.threats	53
abstract_inverted_index.trusted	59
abstract_inverted_index.without	205
abstract_inverted_index.However,	63
abstract_inverted_index.Overall,	190
abstract_inverted_index.attacks.	100, 189
abstract_inverted_index.behavior	44
abstract_inverted_index.evaluate	145
abstract_inverted_index.existing	114
abstract_inverted_index.incident	122
abstract_inverted_index.previous	64
abstract_inverted_index.privacy.	151, 212
abstract_inverted_index.security	178, 202
abstract_inverted_index.specific	140
abstract_inverted_index.ParTEETor	146
abstract_inverted_index.activists	9
abstract_inverted_index.algorithm	118, 130
abstract_inverted_index.anonymity	2
abstract_inverted_index.enforcing	138, 176
abstract_inverted_index.execution	60
abstract_inverted_index.guarantee	181
abstract_inverted_index.internet.	23
abstract_inverted_index.introduce	86
abstract_inverted_index.leverages	92
abstract_inverted_index.mitigated	56
abstract_inverted_index.political	8
abstract_inverted_index.practical	78
abstract_inverted_index.proposals	65
abstract_inverted_index.security,	148
abstract_inverted_index.security.	123
abstract_inverted_index.selection	117, 129
abstract_inverted_index.Non-policy	110
abstract_inverted_index.ParTEETor,	87
abstract_inverted_index.evaluation	153
abstract_inverted_index.leveraging	58
abstract_inverted_index.non-policy	107
abstract_inverted_index.operation:	106
abstract_inverted_index.protection	182
abstract_inverted_index.repressive	13
abstract_inverted_index.vulnerable	34
abstract_inverted_index.TEE-based),	167
abstract_inverted_index.Tor-variant	89
abstract_inverted_index.deployments	94, 195
abstract_inverted_index.governments	14
abstract_inverted_index.identities.	46
abstract_inverted_index.penetration	161
abstract_inverted_index.performance	171, 210
abstract_inverted_index.significant	207
abstract_inverted_index.demonstrated	31
abstract_inverted_index.demonstrates	154
abstract_inverted_index.environments	61
abstract_inverted_index.performance,	149
abstract_inverted_index.unrealistic.	81
abstract_inverted_index.communicating	20
abstract_inverted_index.deanonymizing	39
abstract_inverted_index.substantially	199
abstract_inverted_index.configuration.	143
abstract_inverted_index.TEE-based-which	75
cited_by_percentile_year
countries_distinct_count	0
institutions_distinct_count	8
citation_normalized_percentile