[tor-dev] Sybil attack detection

[Karsten Loesing]

On 05/08/14 18:00, Karsten Loesing wrote:
> On 05/08/14 17:24, Philipp Winter wrote:
>> On Tue, Aug 05, 2014 at 11:37:45AM +0200, Karsten Loesing wrote:
>>> Started looking into better algorithms to detect Sybil attacks on the
>>> Tor network.  Current thinking is that we should define relay similarity
>>> metrics like common IP address prefix length or time between first seen
>>> in a consensus, go throw the consensus archives, and see which relays
>>> look similar but are not defined to be in the same family.
>>
>> Do you already have some code or more details on that?
> 
> Details, yes, see below.  Code, not really, but give me a few hours
> tomorrow to clean it up and put it online.

https://github.com/kloesing/SAD

All the best,
Karsten