OONI and Daphn3

Transcript

1. OONI and b0wser Daphn3

2. OONI • Open Observatory of Network interference • Provide a

   methodology and framework • Strong focus on Openness

3. Why OONI? • A lot of tools exist, but are

   either: • Closed source • Closed methodologies • Closed data • OONI is to be: • Free Software • using Open and described methodologies • publishing all the collected data with Open License

4. What it detects • It’s goals is to detect: •

   Network filtering (“Is my network traffic being tampered with?”) • Content restrictions (“What is being blocked?”) • Filtering technique (“How is it being blocked?”, “What software are they using?”)

5. b0wser • Attempts to bisect DPI device fingerprints by using

   the firewall as an Oracle • Given a censored packet exchange, we try to understand what the DPI is matching to do blocking Daphn3 look, we’re intellectuals

6. client server Blocked client server Blocked ☢ mutation TCP packet

   ☢ client server Unblocked ☢ .... client server Blocked ☢ legend:

7. OONI Architecture        

             

8. B0wser Architecture pcap file OONIProbe OONIB firewall ☢ ☢ ☢

   mutation

9. b0wser’s problems • It does not work when: • The

   DPI is doing fuzzy matching • The DPI is matching on multiple fingerprints • When the blocking does not happen instantly (ex. Active probing) Daphn3

10. Implementation details of OONI • Written in Python • Based

    on twisted • Provides scapy twisted integration • Is currently a prototype. • Expect problems and to need to have to use the source • Please kill bugs • Parts of OONIB implemented, no remote reporting, OONI- probe runs only locally

11. Come hack with us :) • https://www.torproject.org/ • #tor, #tor-dev,

    #ooni irc.oftc.net • https://ooni.nu/ • https://gitweb.torproject.org/ooni-probe.git