Understanding when location-hiding using overlay networks is feasible

Overlay networks (proxy networks) have been used as a communication infrastructure to allow applications to communicate with users without revealing their IP addresses. Such proxy networks are used to enhance application security; including protecting applications from direct attacks and infrastructure Denial-of-Service attacks. However, the conditions under which such approaches can hide application location are not well understood. To shed light on this question, we develop a formal framework for proxy network approach to location-hiding which encompasses most of the proposed approaches. It is used to characterize how attacks, defenses, and correlated host vulnerabilities affect the feasibility of location-hiding. We find that existing approaches employing static structures (e.g. SOS and I3) cannot hide application location because attackers gain information monotonically and quickly penetrate the proxy network. However, adding defenses, such as proxy network reconfiguration or migr...

• Type: Journal
• Year: 2006
• Where: CN
• Authors: Ju Wang, Andrew A. Chien
• Keywords: Application Location, CN 2006, Proxy Network, Such Proxy Networks