On the Effectiveness of Changing Pseudonyms to Provide Location Privacy in VANETs

Buttyán, Levente; Holczer, Tamás; Vajda, István

doi:10.1007/978-3-540-73275-4_10

Cited by 188 publications

(151 citation statements)

References 11 publications

Supporting

Mentioning

151

Contrasting

Order By: Relevance

“…Location privacy has been studied over the past decade along two orthogonal dimensions: spatial cloaking through location k-anonymity represented by [17,26,7,32,13,6] and mix-zone based privacy protection and its variations represented by [9,15,16,11,29,25]. However, these approaches are suitable only for snapshot queries and are inadequate and ineffective for protecting location privacy of mobile users with continuous query services.…”

Section: Related Workmentioning

confidence: 99%

“…The idea of building mix-zones at road intersections is proposed in [15] and [11]. In [16], a formulation for optimal placement of mix-zones in a road map is discussed.…”

Section: Related Workmentioning

confidence: 99%

“…Spatial cloaking is effective for snapshot queries but vulnerable to CQ-attacks. The second class of location anonymization techniques is represented by mix-zone development [9,15,16,11,29]. Mix-zones are spatial regions where a set of users enter, change pseudonyms in such a way that the mapping between their old and new pseudonyms is not revealed.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Anonymizing continuous queries with delay-tolerant mix-zones over road networks

Palanisamy

Liu

Lee

et al. 2013

Distrib Parallel Databases

View full text Add to dashboard Cite

This paper presents a delay-tolerant mix-zone framework for protecting the location privacy of mobile users against continuous query correlation attacks. First, we describe and analyze the continuous query correlation attacks (CQ-attacks) that perform query correlation based inference to break the anonymity of road networkaware mix-zones. We formally study the privacy strengths of the mix-zone anonymization under the CQ-attack model and argue that spatial cloaking or temporal cloaking over road network mix-zones is ineffective and susceptible to attacks that carry out inference by combining query correlation with timing correlation (CQ-timing attack) and transition correlation (CQ-transition attack) information. Next, we introduce three types of delay-tolerant road network mix-zones (i.e., temporal, spatial and spatio-temporal) that are free from CQ-timing and CQ-transition attacks and in contrast to conventional mix-zones, perform a combination of both location mixing and identity mixing of spatially and temporally perturbed user locations to achieve stronger anonymity under the CQ-attack model. We show that by combining temporal and spatial delay-tolerant mix-zones, we can obtain the strongest anonymity for continuous queries while making acceptable tradeoff between anonymous query processing cost and temporal delay incurred in anonymous query processing. We evaluate the proposed techniques through extensive experiments conducted on realistic traces produced by GTMobiSim on different scales of geographic maps. Our experiments show that the proposed techniques offer high level of anonymity and attack resilience to continuous queries.

show abstract

Section: Related Workmentioning

confidence: 99%

“…The idea of building mix-zones at road intersections is proposed in [15] and [11]. In [16], a formulation for optimal placement of mix-zones in a road map is discussed.…”

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Anonymizing continuous queries with delay-tolerant mix-zones over road networks

Palanisamy

Liu

Lee

et al. 2013

Distrib Parallel Databases

View full text Add to dashboard Cite

show abstract

“…As a pseudonym changed by an isolated node can be trivially guessed by an external party, pseudonym changes should be coordinated in regions called mix zones [12,17,25,32]. In this work, we consider that mobile users coordinate pseudonym changes as defined in [32] and achieve location privacy at a low cost.…”

Section: Threat Modelmentioning

confidence: 99%

Privacy of Community Pseudonyms in Wireless Peer-to-Peer Networks

et al. 2012

View full text Add to dashboard Cite

Wireless networks offer novel means to enhance social interactions. In particular, peer-to-peer wireless communications enable direct and real-time interaction with nearby devices and communities and could extend current online social networks by providing complementary services including real-time friend and community detection and localized data sharing without infrastructure requirement. After years of research, the deployment of such peer-to-peer wireless networks is finally being considered. A fundamental primitive is the ability to discover geographic proximity of specific communities of people (e.g, friends or neighbors). To do so, mobile devices must exchange some community identifiers or messages. We investigate privacy threats introduced by such communications, in particular, adversarial community detection. We use the general concept of community pseudonyms to abstract anonymous community identification mechanisms and define two distinct notions of community privacy by using a challenge-response methodology. An extensive cost analysis and simulation results throw further light on the feasibility of these mechanisms in the upcoming generation of wireless peer-to-peer networks.

show abstract

“…Beresford et al [2] propose the concept of mix zone, an area in which users' movements cannot be observed, and to use entropy of the mix zone to quantify the information obtained by an adversary on the user movements through mix zones. Applying the same principle, the authors in [4,10] use the entropy provided by the mix zones to evaluate the level of location privacy achieved by the vehicles in vehicular ad hoc neworks (VANET). In [9], a flow-based metric is proposed to measure the effectiveness of mix zones and use it as a basis for the optimal placement of mix zones in mobile networks.…”

Section: Related Workmentioning

confidence: 99%

Measuring long-term location privacy in vehicular communication systems

Kargl

Weber

2010

Computer Communications

View full text Add to dashboard Cite

a b s t r a c t Vehicular communication systems are an emerging form of communication that enables new ways of cooperation among vehicles, traffic operators, and service providers. However, many vehicular applications rely on continuous and detailed location information of the vehicles, which has the potential to infringe the users' location privacy. A multitude of privacy-protection mechanisms have been proposed in recent years. However, few efforts have been made to develop privacy metrics that can provide a quantitative way to assess the privacy risk, evaluate the effectiveness of a given privacy-enhanced design, and explore the full possibilities of protection methods.In this paper, we present a location privacy metric for measuring location privacy in vehicular communication systems. As computers do not forget and most drivers of motor vehicles follow certain daily driving patterns, if a user's location information is gathered and stored over a period of time, e.g., weeks or months, such cumulative information might be exploited by an adversary performing a location privacy attack to gain useful information on the user's whereabouts. Thus to precisely reflect the underlying privacy values, in our approach we take into account the accumulated information. Specifically, we develop methods and algorithms to process, propagate, and reflect the accumulated information in the privacy measurements. The feasibility and correctness of our approaches are evaluated by various case studies and extensive simulations. Our results show that accumulated information, if available to an adversary, can have a significant impact on location privacy of the users of vehicular communication systems. The methods and algorithms developed in this paper provide detailed insights into location privacy and thus contribute to the development of future-proof, privacy-preserving vehicular communication systems.

show abstract

On the Effectiveness of Changing Pseudonyms to Provide Location Privacy in VANETs

Cited by 188 publications

References 11 publications

Anonymizing continuous queries with delay-tolerant mix-zones over road networks

Anonymizing continuous queries with delay-tolerant mix-zones over road networks

Privacy of Community Pseudonyms in Wireless Peer-to-Peer Networks

Measuring long-term location privacy in vehicular communication systems

Contact Info

Product

Resources

About