Outsourcing Security Analysis with Anonymized Logs

Zhang, Jianqing; Borisov, Nikita; Yurcik, William

doi:10.1109/seccomw.2006.359577

Cited by 18 publications

(11 citation statements)

References 12 publications

(17 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Hence, a malicious system may inject faulty data into the communication to affect the operation of a competitor. To prevent this, operators may use anonymized auditing that provides mechanisms to verify the integrity of data without accessing the actual data [53]. Additionally, a non-profit or a government agency may perform random inspections to assure lawful operation.…”

Section: Privacy Assurancementioning

confidence: 99%

A blind processing framework to facilitate openness in smart grid communications

2015

View full text Add to dashboard Cite

a b s t r a c tSmart grid has diverse stakeholders that often require varying levels of access to grid state and measurements. At the distribution level (i.e., MAN), smart grid provides two way communication between households and utilities. At the transmission level (i.e., WAN), multiple organizations need to share the transmission lines and cooperate with participants in their region. In this paper, we propose secure communication and computation services for smart grid to transform the current "closed cyber architecture" to an "open cyber architecture". In order to ensure the privacy and integrity of communicating parties at the distribution level, we propose to utilize the smart meters as a gateway between intra-network (i.e., HAN) and inter-network (i.e., WAN) communications, and manage incoming and outgoing traffic and mediate household devices based on the instructions from the electric utility or contracted service providers. To enhance data sharing between operators at the transmission level, we propose an open cyber architecture that utilizes blind processing service, in which sensitive data is transmitted through the secured channel and used in computations running in an isolated environment while the outcome is rendered only to a dedicated user or process. The "open" communication between the smart substructures and "blind" computation at operation centers will increase data sharing, minimize human intervention, and mitigate cascading events. In the paper, we provide and discuss underlying mechanisms to achieve an open cyber architecture.

show abstract

Section: Privacy Assurancementioning

confidence: 99%

A blind processing framework to facilitate openness in smart grid communications

2015

View full text Add to dashboard Cite

show abstract

“…Hence, a malicious system may inject faulty data into the communication to affect the operation of a competitor. Accuracy of transmitted messages will be verified using data integrity evaluations with anonymized auditing similar to [4], [74], [78]. Anonymized auditing will provide mechanisms to verify the integrity of data without accessing the actual data.…”

Section: A Privacymentioning

confidence: 99%

Blind processing: Securing data against system administrators

Güneş

Evrenosoğlu

2010

2010 IEEE/IFIP Network Operations and Management Symposium Workshops

View full text Add to dashboard Cite

Multi-owner systems such as power grid need information from all parties to operate efficiently. However, in general, information sharing is limited by market and other constraints. In addition, the emerging problem of demand side management in distribution systems as a part of "smarter grid" efforts, secure communication and execution between the utilities and the customers is required to ensure the privacy. In this paper, we propose blind processing, a novel communication and execution approach for entities that compete with each other but need to cooperate for the overall good of the system. Our goal is to allow information exchange between system components with protection mechanisms against everyone including system administrators. Shielding information will prevent gaining access to the sensitive data while providing a complete picture of the whole system in computations. Such a security mechanism can be provided by employing the functionality of Trusted Computing, a security technology that utilizes hardware and software modules to improve the trustworthiness of a system. Sensing and Control SubsystemsOffline communication Operation Center A Operation Center B Communication and Control LinesOperation Operation Center C Operation Center D

show abstract

“…[9,17,18]. In [9] light-weight practical data sanitization techniques geared towards detection capabilities are presented in an overall framework.…”

Section: Related Workmentioning

confidence: 99%

“…In [17] this suppression is structured in a concept hierarchy, such that it can be controlled better. An actual tool that allows multiple levels of pseudonymization is described in [18].…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Distance-preserving pseudonymization for timestamps and spatial data

Kerschbaum¹

2007

Proceedings of the 2007 ACM Workshop on Privacy in Electronic Society

View full text Add to dashboard Cite

The need for privacy in intrusion detection data, such as audit logs is widely recognized. The prevalent method for privacy protection in audit logs is pseudonymization (and suppression). There is a clear trade-off between the privacy of a pseudonymization technique and its utility for intrusion detection. E.g., for IP addresses a method for prefixpreserving pseudonymization has been developed, that allows pseudonymized IP addresses to be still grouped into subnets. This paper describes a pseudonymization technique for timestamps that is distance preserving. I.e. given two pseudonymized timestamps one can compute the distance δ, if δ is below or equal to an agreed threshold d and one cannot compute δ if δ ≥ 2d. We extend our technique for twodimensional spatial data, e.g. location of objects or persons. We also evaluate the privacy any such distance-preserving technique can provide for timestamps theoretically and on real-world log data.

show abstract

Outsourcing Security Analysis with Anonymized Logs

Cited by 18 publications

References 12 publications

A blind processing framework to facilitate openness in smart grid communications

A blind processing framework to facilitate openness in smart grid communications

Blind processing: Securing data against system administrators

Distance-preserving pseudonymization for timestamps and spatial data

Contact Info

Product

Resources

About