Apparatus and method for client identification in anonymous communication networks

An apparatus to identify a client machine in an anonymous communication network, the apparatus comprising:

• a controller including a processor to analyze path vulnerabilities associated with transmission of traffic in an anonymous communication network to identify a client machine, wherein the controller:
• performs a path vulnerability analysis in the anonymous communication network;
• generates results of the path vulnerabilities analysis to determine probability of selection of unpopular ports in the anonymous communication network;
• accesses a web server associated with the anonymous communication network to compromise the web server, the web server being communicatively linked to a client machine;
• and
• modifies the compromised web server with a script that enables injection of a hidden program into the anonymous client machine based on the results of the path vulnerability analysis;
• and
• a memory associated with the processor,
• wherein the controller generates the hidden program to modify the anonymous client machine to establish a new path in the anonymous communication network based on the path vulnerability analysis, wherein traffic from the anonymous client machine is routed through at least one unpopular port in the new path to determine the identity of the client machine in the anonymous communication network.

A computer software product, comprising a non-transitory storage medium readable by a processor, the non-transitory storage medium having stored thereon a set of instructions for performing computer-implemented client identification in an anonymous communication network, the set of instructions comprising:

• (a) a first sequence of instructions which, when executed by the processor, causes said processor to analyze path vulnerabilities and generate results associated with transmission of traffic through the anonymous communication network to determine probability of selection of unpopular ports in the anonymous communication network;
• (b) a second sequence of instruction which, when executed by the processor, causes said processor to inject an increase in perceived bandwidth and an increase in perceived uptime into one or more unpopular ports and one or more associated malicious routers based on the results of the path vulnerability analysis;
• (c) a third sequence of instructions which, when executed by the processor, causes said processor to access a web server associated with the anonymous communication network to compromise the web server, the web server being communicatively linked to a client machine;
• and
• (d) a fourth sequence of instructions which, when executed by the processor, causes said processor to modify the compromised web server with a script that enables injection of a hidden program into the client machine based on the results of the path vulnerability analysis,
• wherein the hidden program modifies the client machine to establish a new path in the anonymous communication network, wherein traffic from the client machine is routed through at least one unpopular port in the new path to determine the identity of the client machine in the anonymous communication network.