Detecting and blocking onion router traffic using deep packet inspection

TOR (The Onion Router) TOR (The Onion Router) has been a very popular anonymous proxy service. Since its first usage, TOR has been improved and become a very big network consisting more than 7000 relays. Beside used by journalist, activist, and writer as a tool for their freedom of speech, its highly anonymous service is also used by bot-nets, malware, distributed denial of service attacks, hidden services that sells illegal things, spams, and many more. This paper will explain about a TOR usage detection system by using deep packet inspection to extract and analyze its network traffic. The result of the analysis will be used as a parameter for a proxy server to block TOR traffic in the network. Using this network, detection, and blocking design, we can block the Onion Router Traffic originated from TOR browser.