Tor Detection
Tor Detection Intelligence
The following page provides information on the Tor Detection indicator drivers included in Netify's Intelligence engine.
Overview
Much like consumer VPN services, Tor protects privacy and makes it possible to prevent unwanted third-party tracking of Internet activity. However, for businesses and other enviroments, Tor can pose a threat to security, compliance, and network access control.
Other Intelligence Info
Intelligence OverviewIntelligence Catalog
Intelligence Categories
Intelligence Release Log
| Score | Description |
|---|---|
| 0 | Informational |
| 1-25 | Low Risk |
| 26-50 | Medium Risk |
| 51-75 | High Risk |
| 76-100 | Critical Risk |
Indicator Drivers
Tor Bridge Driver
The Tor Bridge indicator driver is triggered when a connection to a remote Tor bridge node is detected. A Tor Bridge is essentially a hidden entry point to the Tor network.
| Tag | Default Score |
|---|---|
| tor_bridge | 85 - Critical Risk |
Tor Exit Driver
The Tor Exit indicator is triggered when a connection to or from a Tor exit node is detected. A Tor exit Node is the final relay in a Tor circuit. While entry and middle nodes pass encrypted traffic within the Tor network, the exit node is the "off-ramp" where data is decrypted and sent out to the open internet.
It should be noted that most Tor exit nodes also serve as relays.
| Tag | Default Score |
|---|---|
| tor_exit | 70 - High Risk |
Tor Relay Driver
The Tor Relay indicator driver is triggered when a connection to a remote Tor relay node is detected. A Tor relay is one of the primary entry points to the Tor network.
| Tag | Default Score |
|---|---|
| tor_relay | 70 - High Risk |