Reverse Engineering a Nit That Unmasks Tor Users
Document Type
Conference Proceeding
Publication Date
5-25-2016
Abstract
This paper is a case study of a forensic investigation of a Network Investigative Technique (NIT) used by the FBI to deanonymize users of a The Onion Router (Tor) Hidden Service. The forensic investigators were hired by the defense to determine how the NIT worked. The defendant was accused of using a browser to access illegal information. The authors analyzed the source code, binary files and logs that were used by the NIT. The analysis was used to validate that the NIT collected only necessary and legally authorized information. This paper outlines the publicly available case details, how the NIT logged data, and how the NIT utilized a capability in flash to deanonymize a Tor user. The challenges with the investigation and concerns of the NIT will also be discussed.
Recommended Citation
Miller, Matthew; Stroschein, Josh; and Podhradsky, Ashley L., "Reverse Engineering a Nit That Unmasks Tor Users" (2016). Faculty Research & Publications. 2.
https://scholar.dsu.edu/ccspapers/2