[freehaven-cvs] clean up 7.1

[arma@seul.org (Roger Dingledine)]

Update of /home/freehaven/cvsroot/doc/routing-zones
In directory moria.mit.edu:/home2/arma/work/freehaven/doc/routing-zones

Modified Files:
	routing-zones.tex 
Log Message:
clean up 7.1


Index: routing-zones.tex
===================================================================
RCS file: /home/freehaven/cvsroot/doc/routing-zones/routing-zones.tex,v
retrieving revision 1.35
retrieving revision 1.36
diff -u -d -r1.35 -r1.36
--- routing-zones.tex	28 Jan 2004 17:56:43 -0000	1.35
+++ routing-zones.tex	28 Jan 2004 18:11:31 -0000	1.36
@@ -894,24 +894,25 @@
 
 \subsection{Explicit Consideration of AS-level Paths}
 
-Our results suggest that, to reduce the probability of eavesdropping
-attacks using dispersal, designers and users of mix networks should
-take into account the underlying AS-level paths of the underlying mix
-network path.  Mix network paths can be made more if senders increase
+Our results suggest that
+%, to reduce the probability of eavesdropping
+%attacks using dispersal,
+designers and users of mix networks should
+take into account the underlying AS-level paths of each path in the mix
+network.  Mix network paths can be made more safe if senders increase
 the jurisdictional independence of the paths they use, by explicitly
-choose entry and exit nodes to avoid traversing the same AS upon entry
+choosing entry and exit nodes to avoid traversing the same AS upon entry
 and exit to the mix network.
 
-Against small adversaries (such as each AS between Alice and the anonymity
-network), it is clearly better to avoid exit nodes that traverse these
-ASes.
-Even if you do something intelligent about selecting exit nodes, will
-this choice provide the adversary information about where Alice is
-coming from (i.e., what her direct upstream ISP is?)  (I actually don't
-think it's too big of a deal, because it simply just tells the adversary
-where Alice is *not*, but there are plenty of places Alice could still
-be...)  Deserves more attention.
-
+However, while this approach is clearly better against a small
+adversary who owns one AS, we must also consider the effect against a
+large adversary who owns many ASes. By narrowing the set of possible
+mixes Alice might use, she gives \emph{more} information to a large
+adversary. For example, an adversary who observes a transaction exiting
+the mix network at a Sprint node can deduce that Alice did not enter
+the mix network through a Sprint node. We must consider the effects
+of our suggested algorithm on all levels of adversary; we leave this
+investigation to future work.
 
 \subsection{Improving Jurisdictional Independence with Node Placement}
 

***********************************************************************
To unsubscribe, send an e-mail to majordomo@seul.org with
unsubscribe freehaven-cvs       in the body. http://freehaven.net/