A High-level Programming Environment for Packet Trace Anonymization and Transformation

Computer Communication Review

Volumn 33, Issue 4, 2003, Pages 339-351

  Pang, Ruoming ^a   Paxson, Vern ^b  

^a Princeton University   (United States)

^b INTERNATIONAL COMPUTER SCIENCE INSTITUTE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CODES (SYMBOLS); HIGH LEVEL LANGUAGES; NETWORK PROTOCOLS; PACKET SWITCHING; TELECOMMUNICATION TRAFFIC;

PACKET TRACE ANONYMIZATION; PACKET TRANSFORMATION;

INTERNET;

EID: 1242310066     PISSN: 01464833     EISSN: None     Source Type: Journal    
DOI: 10.1145/863993.863994     Document Type: Conference Paper

References (22)

1. S. Axelsson. The base-rate fallacy and the difficulty of intrusion detection. ACM Transactions on Information and System Security, 3(3):186-205, August 2000.
2. Capture the capture the flag, http://www.shmoo.com/cctf/.
3. G. Combs. The Ethereal Network Analyzer. http://www.ethereal.com/.
4. Federal Committee on Statistical Methodology. Report on statistical disclosure limitation methodology (statistical policy working paper 22), 1994. http://www.fcsm.gov/working-papers/spwp22.html.
5. A. Feldmann. BLT: Bi-layer tracing of HTTP and TCP/IP. In Proceedings of WWW-9, May 2000.
6. Anonymized FTP traces. http://www-nrg.ee.lbl.gov/anonymized-traces.html.
7. S. D. Gribble and E. A. Brewer. System design issues for Internet middleware services: Deductions from a large client trace. In Proc. USENIX Symp. on Internet Technologies and Systems, December 1997.
8. The honeypot challenge, http://project.honeynet.org/misc/chall.html.
9. C. Kreibich. NetDuDe (NETwork DUmp data Displayer and Editor). http://netdude.sourceforge.net/.
10. R. Lippmann, S. Webster, and D. Stetson. The effect of identifying vulnerabilities and patching software on the utility of network intrusion detection. In Proceedings of Recent Advances in Intrusion Detection, number 2516 in Lecture Notes in Computer Science. Springer-Verlag, 2002.
11. G. R. Malan and F. Jahanian. An extensible probe architecture for network protocol performance measurement. In Proceedings of ACM SIGCOMM, 1998.
12. G. Minshall. TCPdpriv: Program for Eliminating Confidential Information from Traces. Ipsilon Networks, Inc. http://ita.ee.lbl.gov/html/contrib/tcpdpriv.html.
13. J. Mogul. Trace anonymization misses the point. Presentation on WWW 2002 Panel on Web Measurements.
14. S. Patarin and M. Makpangou. Pandora: A flexible network monitoring platform. In Proceedings of the USENIX 2000 Annual Technical Conference, San Diego, June 2000.
15. V. Paxson. Bra: A System for Detecting Network Intruders in Real-Time, http://www.icir.org/vern/bro-info.html.
16. V. Paxson. Bro: A system for detecting network intruders in real time. Computer Networks, December 1999.
17. M. Peuhkuri. A method to compress and anonymize packet traces. In Proceedings of the ACM SIGCOMM Internet Measurement Workshop, November 2001.
18. S. Savage. Private communication.
19. Q. Sun, D. R. Simon, Y. Wang, W. Russell, V. N. Padmanabhan, and L. Qiu. Statistical identification of encrypted web browsing traffic. In Proceedings of IEEE Symposium on Security and Privacy, Oakland, CA, USA, May 2002.
20. WildPackets, Inc. EtherPeek. http://www.etherpeek.com/.
21. J. Xu, J. Fan, M. Ammar, and S. B. Moon. On the design and performance of prefix preserving IP traffic trace anonymization. In Proceedings of the ACM SIGCOMM Internet Measurement Workshop, November 2001.
22. T. Ylonen. Thoughts on how to mount an attack on tcpdpriv's "-a50" option, http://ita.ee.lbl.gov/html/contrib/attack50/attack50.html.