Onion Routing
Onion Routing: Multi-layered encryption and routing via multiple nodes to obfuscate communication paths. The term is relevant to the assessment and design of modern security architecturesSecurity ArchitectureThe structured design of security controls, trust boundaries, data flows, and operational responsibilities. and should be applied within the specific technical and organizational context.
How it works and where it fits
Onion Routing concerns communication between systems and therefore addressing, protocol state, trust boundaries, and reachable services. Security analysis must look beyond individual packets to direction, session, identity, encryption, and intended purpose. Different network layers introduce their own controls, assumptions, and failure modes.
Practical security relevance
Communication paths should be documented, unnecessary connections prevented, and permitted flows defined as narrowly as practical. Segmentation, secure protocols, authentication, and logging reinforce one another. Monitoring should cover known signatures as well as unusual destinations, volumes, and timing; rule and topology changes belong in a controlled process.
Related concepts
- EncryptionEncryptionConverts plaintext into unreadable ciphertext using a key.: Converts plaintext into unreadable ciphertext using a key.
- OPSECOPSECThe discipline of protecting critical information by controlling the traces and clues an adversary could collect.: The discipline of protecting critical information by controlling the traces and clues an adversary could collect.
- Network FlowNetwork FlowSummary of a communication relationship between endpoints over a specific period.: Summary of a communication relationship between endpoints over a specific period.
- Threat ActorThreat ActorAn individual, group, or organization that intentionally carries out or supports cyberattacks.: An individual, group, or organization that intentionally carries out or supports cyberattacks.