A Generic Anonymization Framework for Network Traffic

Koukis, D.; Antonatos, Spiros; Antoniades, Demetris; Markatos, Evangelos P.; Trimintzios, P.

doi:10.1109/icc.2006.255113

Cited by 57 publications

(26 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Its functionality is based on the Anonymization API (AAPI), described thoroughly in [15]. AAPI allows a user to write his own anonymization applications.…”

Section: Anontoolmentioning

confidence: 99%

Flexible and high-performance anonymization of NetFlow records using anontool

Foukarakis

Antoniades

Antonatos

et al. 2007

2007 Third International Conference on Security and Privacy in Communications Networks and the Workshops - SecureComm 2007

View full text Add to dashboard Cite

Abstract-Netflow is a protocol widely adopted by the security and performance measurements community. Nowadays, many distributed applications and architectures base their functionality on Netflow data collected at diverse environments. However, communities and administrators are reluctant to share exported Netflow data for privacy reasons. As a consequence, the effectiveness of distributed approaches is limited due to lack of input data. To overcome this limitation, anonymization on Netflow data is proposed for sharing. However, the available tools are either proprietary or of very limited functionality. Towards this direction, we propose and implement anontool, that allow administrators to anonymize Netflow data in a highly customizable way. A comparison of anontool with existing solutions is provided along two dimensions: functionality and performance. Anontool can anonymize traffic even at high bandwidth rates, outperforming most of the tools and having same performance with specialized -but very limited in functionality -approaches.

show abstract

“…Its functionality is based on the Anonymization API (AAPI), described thoroughly in [15]. AAPI allows a user to write his own anonymization applications.…”

Section: Anontoolmentioning

confidence: 99%

Flexible and high-performance anonymization of NetFlow records using anontool

Foukarakis

Antoniades

Antonatos

et al. 2007

2007 Third International Conference on Security and Privacy in Communications Networks and the Workshops - SecureComm 2007

View full text Add to dashboard Cite

show abstract

“…Privacy protection in network monitoring is typically thought of as the anonymisation of traffic traces, an area where several works have been proposed [17][18] [19][20] [21]. Although such frameworks are aimed to be quite generic, a significant drawback is that they base on quite "static" anonymisation policies specification; in all cases, the policies that will regulate the execution of the underlying anonymisation APIs must be defined in an explicit manner.…”

Section: Related Workmentioning

confidence: 99%

A privacy-aware access control model for distributed network monitoring

Papagiannakopoulou

Koukovini

Lioudakis

et al. 2013

Computers & Electrical Engineering

View full text Add to dashboard Cite

Despite the usefulness of network monitoring for the operation, maintenance, control and protection of communication networks, as well as law enforcement, network monitoring activities are surrounded by serious privacy implications. Their inherent leakage-proneness is harshened due to the increasing complexity of the monitoring procedures and infrastructures, that may include multiple traffic observation points, distributed mitigation mechanisms and even inter-operator cooperation. However, current approaches present limitations in effectively addressing such privacy issues, as they have not been designed for meeting the particular requirements of distributed network monitoring and conceptualising the corresponding functionalities and infrastructures; additionally, they are not suitable for highly dynamic and distributed environments and for automating privacy-awareness. In this paper, we introduce a new access control model that aims at addressing these concerns; it is conceived on the basis of data protection legislation, as well as distributed network monitoring. The proposed approach provides rich expressiveness, captures all the underlying concepts along with their associations and enables the specification of contextual authorisation policies and * Corresponding author.Email address: epapag@icbnet.ntua.gr (Eugenia I. Papagiannakopoulou) ⋆ This is a revised and expanded version of a paper that appeared in the proceedings of the 4th MITACS Workshop on Foundations & Practice of Security, Paris, France, May 2011, pp. 208-217 [44]. Computers & Electrical Engineering 2011 June 7, 2012 expressive separation and binding of duty constraints. Finally, two key innovations of our work consist in the ability to define access control rules in any possible level of abstraction and in enabling a verification procedure which results in inherently privacy-aware workflows, thus minimising run-time reasoning overheads and fostering the realisation of the Privacy by Design vision. Preprint submitted to Elsevier

show abstract

“…Over the past decade, there has been a marked increase in the number of proposals for anonymizing network data (e.g., [16,12,31,26,25,10]). For the most part, these works attempt to sanitize network data by applying various transformations to fields within packet headers (e.g., using prefix-preserving anonymization [25]), by using domain knowledge to search for specific patterns (such as URLs or bytecode) using regular expressions [17,11,26], by shuffling payloads while preserving the ability to search for short substrings [27], or by deleting the payloads altogether.…”

Section: Related Workmentioning

confidence: 99%

Amplifying limited expert input to sanitize large network traces

Huang

Monrose

Reiter

2011

2011 IEEE/IFIP 41st International Conference on Dependable Systems &Amp; Networks (DSN)

View full text Add to dashboard Cite

Abstract-We present a methodology for identifying sensitive data in packet payloads, motivated by the need to sanitize packets before releasing them (e.g., for network security/dependability analysis). Our methodology accommodates packets recorded from an incompletely documented protocol, in which case it will be necessary to consult a human expert to determine what packet data is sensitive. Since expert availability for such tasks is limited, however, our methodology adopts a hierarchical approach in which most packet inspection is done by less-trained workers whose designations of sensitive data in selected packets best match the expert's. At the core of our methodology is a data reduction and presentation algorithm that selects candidate workers based on their evaluations of a small number of packets; that solicits these workers' designations of sensitive data in a larger (but still minuscule) subset of packets; and then applies these designations to mark sensitive data in the entire data set. We detail our algorithms and evaluate them in a realistic user study.

show abstract

A Generic Anonymization Framework for Network Traffic

Abstract: Abstract

Cited by 57 publications

References 11 publications

Flexible and high-performance anonymization of NetFlow records using anontool

Flexible and high-performance anonymization of NetFlow records using anontool

A privacy-aware access control model for distributed network monitoring

Amplifying limited expert input to sanitize large network traces

Contact Info

Product

Resources

About