Sharing network logs for computer forensics: A new tool for the anonymization of NetFlow records

Workshop of the 1st International Conference on Security and Privacy for Emerging Areas in Communication Networks, 2005

Volumn 2005, Issue , 2005, Pages 37-42

  Slagell, Adam J ^a   Yifan, Li ^a   Katherine, Luo ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 33847009497     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECCMW.2005.1588293     Document Type: Conference Paper

References (16)

1. J. Biskup and U. Flegel, "On Pseudonymization of Audit Data for Intrusion Detection", USENIX Workshop on Design Issues in Anonymity and Unobservability, 2000.
2. J. Biskup and U. Flegel, "Transaction-Based Pseudonyms in Audit Data for Privacy Respecting Intrusion Detection", Recent Advances in Intrusion Detection (RAID), 2000.
3. D. Chaum, "Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms", Communications of the ACM, Vol. 24 No. 2, 1981, pp. 84-88.
4. U. Flegel, "Pseudonymizing UNIX Log Files", Infrastructure Security Conference, 2002.
5. Department of Homeland Security, "Information Sharing & Analysis Centers", Jun. 2005; http://www.dhs.gov/dhspublic/display?theme= 73&content=1375
6. ISC - Internet Storm Center, Jun. 2005; http://isc.incidents.org
7. Iain Thomson, "IT Industry's 12-point Cyber-security Plan", Dec. 2004; http://www.vnunet.com/news/1160087
8. P. Lincoln, P. Porras and V. Shmatikov, "Privacy-Preserving Sharing and Correlation of Security Alerts", USENIX Security Symposium, San Diego, CA, 2004.
9. E. Lundin and E. Jonsson, "Privacy vs Intrusion Detection Analysis", Recent advances in Intrusion Detection (RAID), 1999.
10. The White House, "The National Strategy to Secure Cyberspace", Jun. 2005; http://www.securecyberspace.gov
11. R. Pang and V. Paxson, "A High-Level Programming Environment for Packet Trace Anonymization and Transformation", ACM SIGSOMM, 2003.
12. Adam Slagell, Jun Wang, and William Yurcik "Network Log A-nonymization: Application of Crypto-PAn to Cisco Netflows", Work-shop on Secure Knowledge Management (SKM), 2004.
13. th International Conference on Information Security (SEC), 1997.
14. B. Waters, D. Balfanz, G. Durfee and D.K. Smetters, "Building an Encrypted and Searchable Audit Log", Internet Society Network Distributed Systems Symposium (NDSS), 2004.
15. J. Xu, J. fan, M. H. Ammar and S. B. Moon, "On the Design and Performance of Prefix-Preserving IP Traffic Trace Anonymization", ACM SIGCOMM Internet Measurement Workshop, 2001.
16. J. Xu, J. Fan, M. H. Ammar and S. B. Moon, "Prefix-Preserving IP Address Anonymization: Measurement-based Security Evaluation and a New Cryptography-based Scheme", IEEE International Conference on Network Protocols (ICNP), 2002.