A Framework to TOR Network Traffic Analytics

Technology is evolving and penetrating rapidly into various domains of human life. As the number of small ubiquitous devices and web applications grows, privacy issues are becoming more and more sensitive. TOR is an application/browser that has been widely used to preserve online privacy. While it might gain some controversies, since it leaves lots of space for abuse, TOR remains one of the most successful anonymization tools available. This research aims to set and implement an experimental framework to TOR traffic analysis. The setup enables the investigation of various aspects of TOR utilization, e.g. if it is used more for web search anonymization or in non-interactive web, etc. A Raspberry Pi micro-computer was set to emulate the exit TOR routing node. Its traffic was also captured and stored in a PC. Popular traffic sniffing and analyzing applications, such as Wireshark, can be further used for various traffic classification and correlation. Based on the proposed experimental framework, the system has collected and stored the TOR traffic for two weeks and has shown its functionality and potential