SCRUB-tcpdump: A multi-level packet anonymizer demonstrating privacy/analysis tradeoffs

Proceedings of the 3rd International Conference on Security and Privacy in Communication Networks, SecureComm

Volumn , Issue , 2007, Pages 49-56

  Yurcik, William ^a,c   Woolam, Clay ^b   Hellings, Greg ^b   Khan, Latifur ^b   Thuraisingham, Bhavani ^b  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

^b UNIVERSITY OF TEXAS AT DALLAS   (United States)

^c Army Research Laboratory

Author keywords

Anonymization; Data obfuscation; Network data sharing; Network intrusion detection; Network monitoring; Network packet traces; Privacy protection; Security data sharing

Indexed keywords

ANONYMIZATION; DATA OBFUSCATION; NETWORK DATA SHARING; NETWORK INTRUSION DETECTION; NETWORK MONITORING; NETWORK PACKET TRACES; PRIVACY PROTECTION; SECURITY DATA SHARING;

COMPUTER NETWORKS; ELECTRIC BREAKDOWN; SECURITY SYSTEMS; TELECOMMUNICATION NETWORKS;

SECURITY OF DATA;

EID: 51349086413     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECCOM.2007.4550306     Document Type: Conference Paper

References (20)

1. Anontool. http://dcs.ics. forth.gr/Activities/Projects /anontool.html
2. E. Blanton, TCPurify - "a sanitary sniffer", http://irg.cs.ohiou.edu/eblanton/tcpurify/
3. T. Brekne, A. Ames, and A. Oslebo, Anonymization of IP Traffic Monitoring Data - Attacks on Two Prefix-Preserving Anonymization Schemes and Some Proposed Remedies, Workshop on Privacy Enhancing Technologies (PET), 2005.
4. CANINE: Converter and ANonymizer for Investigating NetFlow Events, http://security.ncsa.uiuc. edu/distribution/CanineDownLoad.html
5. S. E. Coull, C. V. Wright, F. Monrose, M. P. Collins, and M. K. Reiter, Inferring Sensitive Information from Anonymized Network Traces, Network and Distributed Systems Security (NDSS), 2007.
6. Y. Li, A. J. Slagell, K. Luo, and W. Yurcik, CANINE: A Combined Converter and Anonymizer Tool for Processing NetFlows for Security, 13th Intl. Conf. on Telecom. Systems, 2005.
7. K. Luo, Y. Li, C. Ermopoulos, W. Yurcik, and A. J. Slagell, SCRUB-PA: A Multi-Level Multi-Dimensional Anonymization Tool for Process Accounting, ACM Computing Research Repository (CoRR) Technical Report cs.CR/0601079, January 2006.
8. G. Minshall, tcpdpriv. http://ita.ee.lbl.gov/html/contrib/ tcpdpriv.html
9. R. Pang and V. Paxson, A High-Level Programming Environment for Packet Trace Anonymization and Transformation, ACM SIGCOMM, 2003.
10. R. Pang, M. Altaian, V. Paxson, and J. Lee, The Devil and Packet Trace Anonymization, ACM Computer Communications Review, January 2006.
11. M. Peuhkuri, A Method to Compress and Anonymize Packet Traces, ACM SIGCOMM Internet Measurement Workshop, 2001.
12. P. A. Porras, Privacy-Enabled Global Threat Monitoring, IEEE Security and Privacy, November 2006.
13. M. Roesch, Snort: Lightweight Intrusion Detection for Networks, http://www.snort.org/
14. SCRUB-PA: A Tool for Multi-Level Anonymization of Process Accounting Logs. http://security.ncsa.uiuc.edu/distribution/Scrub-PADownLoad. html
15. A. J. Slagell and W. Yurcik, Sharing Computer Network Logs for Security and Privacy: A Motivation for New Methodologies of Anonymization, 1st IEEE SECOVAL Workshop, 2005.
16. A. J. Slagell, K. Lakkaraju, and K. Luo, FLAIM: A Multi-level Anonymization Framework for Computer and Network Logs, Usenix LISA, 2006.
17. R. Stapleton-Gray and S. Gorton, Rendering the Elephant: Characterizing Sensitive Networks for an Uncleared Audience, 7th IEEE "West Point" Workshop on Information Assurance, 2006.
18. Tcpdump Libpcap Official Site, http://www.tcpdump.org/
19. X. Yin, K. Lakkaraju, Y. Li, and W. Yurcik, Selecting Log Data Sources to Correlate Attack Traces For Computer Network Security: Preliminary Results, 11th Intl. Conf. on Telecom. Systems, 2003.
20. J. Zhang, N. Borisov, and W. Yurcik, Outsourcing Security Analysis with Anonymized Logs, 2nd IEEE SECOVAL Workshop, 2006.