Traffic Identification of Tor and Web-Mix

With the wide use of anonymity tools, both blocking and anti-blocking of these tools have become hot topics. And the traffic identifications of the corresponding tools are key issues of both blocking and anti-blocking. In this paper, we address on identifying Tor and Web-Mix traffics, which are two of the most famous anonymity tools. Taking advantage of the typical methods for traffic identification, we proposed a traffic identification scheme based on traffic fingerprint extraction and matching. The fingerprints comprise of the specific strings, packet length and frequency of the packets´ sending time. The details of design and implementation of such traffic identification scheme for both Tor and Web-Mix are presented. The feasibility of the proposed scheme is shown by the simulation experiments results.