Security of Tor Pluggable Transports: A Comprehensive Survey of Vulnerabilities, Attacks, and Countermeasures

Abstract

Tor Pluggable Transports (PTs) constitute the most widely deployed censorship-circumvention layer for an estimated 2.0 to 2.5 million daily Tor users, yet their security has been assessed only through isolated, protocol-specific analyses. This survey presents the first joint vulnerability, attack, and defense framework spanning the five most widely deployed PTs (obfs4, Meek, Snowflake, WebTunnel, and Conjure), which together instantiate the four core obfuscation paradigms: traffic randomization, protocol mimicry, distributed proxying, and refraction networking. From a PRISMA-based synthesis of 119 works (2015 to 2026), we catalog 34 vulnerabilities, 33 attacks, and 30 defenses, organized into four vulnerability categories, namely protocol artifacts, statistical deviations, implementation fingerprints, and architectural weaknesses. We connect them through explicit causal chains and grade each under a uniform evidence methodology that treats closed-world accuracy as a laboratory upper bound rather than a deployment estimate. Four findings emerge. First, infrastructure enumeration, not traffic classification, is the dominant threat: default bridges are recoverable from the Tor Browser distribution without network interaction, and convergent qualitative evidence indicates that default-bridge and publicly distributed access paths are widely blockable before obfuscation materially changes the traffic the censor observes. Second, two protocol-agnostic fingerprints, namely cross-layer round-trip-time misalignment and encapsulated TLS bursts, remain exploitable at low false-positive rates in current evaluations, with no deployed PT-level mitigation. Third, commercial deep-packet-inspection products now ship with circumvention-blocking as a standard product capability. Fourth, website-fingerprinting surveillance survives PT obfuscation, yet the most effective fingerprinting defenses remain undeployed. Effective censorship has migrated from the transport layer to the infrastructure and architectural layers.