Skip to content
Open access

Optimizing multi-objective strategies for enhanced Tor De-anonymization

Jun 2026 · Cybersecurity · Vol 9 · 0 citations · 63 references
Computer Science

TL;DR

This work model joint node–technique selection as a tri-objective problem balancing attack gain (AP), attack impact (AI), and attack cost (AC) and selects a preference-aware compromise with VIKOR to support better de‑anonymization.

Abstract

Tor employs multi-layer encryption and three-hop circuits to provide low-latency anonymity. While indispensable for privacy, these same properties can also be misused to conceal illicit activity. This dual-use nature makes effective de‑anonymization essential under appropriate, policy-bounded oversight, so that harmful behavior can be uncovered without undermining legitimate use. Yet de‑anonymization is not free: taking nodes offline and deploying honeypots consumes significant resources, increases exposure, and risks degrading network availability. Prior work faces two limitations: (i) it decouples the choice of which node to target from which method to apply, overlooking their strong coupling; and (ii) it often evaluates effectiveness with narrow, single-effect proxies, neglecting collateral network impact and operational cost. To support better de‑anonymization, we model joint node–technique selection as a tri-objective problem balancing attack gain (AP), attack impact (AI), and attack cost(AC). For each feasible node–method pair we compute these three metrics, extract the Pareto set, prune with ϵ\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$\epsilon$$\end{document}-constraints, and select a preference-aware compromise with VIKOR. In a Docker-orchestrated testbed, this Pareto-first pipeline achieves about +50%\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$+50\%$$\end{document} higher attack gain and roughly -29%\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$-29\%$$\end{document} lower attack Impact and attack cost compared with random selection.

Read PDF

Similar papers

Conference Open access Jul 2026

REVS-T: Trust-Tier-Aware Provider Selection for Secure Vehicular Computation Offloading

Vehicular computation offloading (VCOff) enables resource-constrained vehicles to delegate delay-sensitive tasks to nearby providers. However, it remains vulnerable to strategic malicious nodes that withhold results, or behave intermittently to evade detection. Although reputation values evolve across repeated interactions, long-term security depends on how these signals are governed and enforced at the decision layer. This paper introduces REVS-T, a four-tier governance and tieraware selection mechanism using reputation bands, warningstreak escalation, and pool partitioning. Under persistent attack at 50% adversarial ratio, REVS-T achieves 91.9% task success and 96.7% malicious avoidance with zero false exclusions, outperforming Threshold by 5.5% and Beta by 14.9%. A four-step ablation under shared reputation-update logic shows composite scoring and four-tier governance as the dominant drivers, with ST-conditioned initialization providing phase-shift adaptation and a fairness guarantee no evaluated baseline achieves.

Sharifah Fayi, Ferheen Ayaz, Zhengguo Sheng · 0 citations
Conference Aug 2026

URP-FL: Robust and Personalized Federated Learning under Heterogeneous and Adversarial Conditions

Federated learning is appealing for privacy-sensitive network systems, yet its practical deployment remains hindered by the following three recurring challenges: (1) client drift under non-IID data, (2) vulnerability to corrupted updates, and (3) the communication cost of repeated model exchange. Most existing approaches address these issues in isolation. While analytically convenient, this separation often fails to reflect real-world conditions. For instance, defenses against poisoning may suppress useful updates, while personalization and compression can alter the aggregation geometry itself. In this paper, we study these effects jointly and propose URP-FL, a compact training framework that integrates reliability-aware aggregation, local regularization for drift control, and sparse client uploads. We provide theoretical analysis establishing a convergence bound with distinct terms capturing optimization error, data heterogeneity, and adversarial impact. Experiments on a non-IID image classification benchmark with sign-flip and label-flip attacks demonstrate the benefits of the unified design. Compared to FedAvg and FedProx, this URP-FL maintains accuracy under attack while reducing transmitted parameters by approximately 75%. Rather than presenting a production ready system, it offers a reproducible and technically coherent step toward federated learning that is more robust under realistic conditions.

Hua Kun, Wei Wang · 0 citations
Conference Open access Aug 2026

Bypassing Krum: Selection-Aware Backdoor Attacks in Federated Learning

Robust aggregation methods are widely used in federated learning to mitigate the impact of adversarial client behavior. Distance-based aggregation rules, such as Krum and Multi-Krum, select updates that are closest to the majority under the assumption that benign updates form a compact cluster. However, these methods rely on geometric properties that can be exploited by adaptive adversaries. We introduce the Krum-Proxy attack, a selection-aware backdoor injection strategy that consistently bypasses Byzantine-robust aggregation. Rather than relying on naive scaling or constraining, our method actively optimizes malicious updates to infiltrate the dense core of the benign distribution. The proposed method constructs adversarial updates that are not only similar to benign updates but are also optimized to lie in regions of the update space that are favored during aggregation. This is achieved through a two-stage optimization procedure that separates task-specific attack objectives from geometry-aware refinement, using a nearestneighbor proxy, stochastic reference modeling, and anchorguided alignment. To maintain stealth, we introduce a projection mechanism that constrains adversarial updates within realistic norm and variance bounds. Experiments on standard federated learning benchmarks show that Krum-Proxy achieves higher attack success while preserving clean accuracy, highlighting the vulnerability of distance-based aggregation to selection-aware adversaries.

Srinivasan Subramanian, Md Abdullah Al Hafiz Khan, K. A. Islam · 0 citations
Conference Open access 2026

Adversarial Distance Metrics: A Threat to Fairness in Clustering-Based Decision Systems

An insider adversary manipulates the distance function to induce discriminatory clustering outcomes against demographic groups, exposing a gap in current fairness auditing practices and demonstrating the urgent need to expand the scope of the algorithmic audit to include distance-function verification.

Shahzad Ahmad, Stefan Rass, Enes Sovtic · 0 citations