A privacy-preserving interdomain audit framework

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2006, Pages 99-108

  Lee, Adam J ^a   Tabriz, Parisa ^a   Borisov, Nikita ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

data obfuscation; distributed audit; logging

Indexed keywords

COLLABORATIVE RESEARCH; DATA OBFUSCATION; DISTRIBUTED AUDIT; NETWORK RECONNAISSANCE; PRIVATE INFORMATION; PROTOTYPE IMPLEMENTATIONS; SENSITIVE INFORMATIONS; VIRTUAL ORGANIZATION;

CRYPTOGRAPHY; DATA PRIVACY; GRID COMPUTING; INTRUSION DETECTION; LOGGING (FORESTRY); MANAGEMENT; NETWORK SECURITY; SUPPLY CHAIN MANAGEMENT;

COMPUTER PRIVACY;

EID: 84885226697     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1179601.1179620     Document Type: Conference Paper

References (39)

1. G. Aggarwal, N. Mishra, and B. Pinkas. Secure computation of the k-th ranked element. In Eurocrypt, May 2004.
2. R. Agrawal, A. Evfimievski, and R. Srikant. Information sharing across private databases. In Proceedings of the 2003 ACM SIGMOD International Conference on Management of Data, pages 86-97, 2003.
3. M. Atallah, M. Bykova, J. Li, K. Frikken, and M. Topkara. Private collaborative forecasting and benchmarking. In ACM Workshop on Privacy in the Electronic Society (WPES'04), Oct. 2004.
4. J. Bethencourt, J. Franklin, and M. Vernon. Mapping internet sensors with probe response attacks. In Proceedings of the USENIX Security Symposium, August 2005.
5. B. H. Bloom. Space/time trade-offs in hash coding with allowable errors. Communications of the ACM, 13(7):422-426, Jul. 1970.
6. E. Bresson, O. Chevassut, D. Pointcheval, and J.-J. Quisquater. Provably authenticated group Diffie-Hellman key exchange. In Proceedings of the 8th ACM conference on Computer and Communications Security (CCS'01), pages 255-264, 2001.
7. California Senate Bill SB 1386, Sept. 2002. 〈http://info.sen.ca.gov/ pub/01-02/bill/sen/sb-1351-1400/sb-1386-bill-20020926-chaptered.html〉.
8. H. Debar, D. Curry, and B. Feinstein. Intrusion detection message exchange format. IETF Internet-Draft, Jan. 2005. 〈http://www3.ietf.org/ proceedings/05mar/IDs/draft-ietf-idwg-idmef-xml-14.txt〉.
9. DeepSight analyzer. Web site, 2006. 〈http://analyzer.symantec.com/ 〉.
10. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, Oct. 1995. Available at http://ec.europa.eu/justice home/fsj/privacy/law/index-en.htm.
11. DShield-distributed intrustion detection system. Web Page, 2006. 〈http://www.dshield.org〉.
12. F. Emekci, D. Agrawal, and A. E. Abbadi. ABACUS: A distributed middleware for privacy preserving data sharing across private data warehouses. In Proceedings of Middleware 2005, volume 3790 of Lecture Notes in Computer Science, pages 21-41. Springer-Verlag, 2005. (Pubitemid 43763627)
13. J. Fan, J. Xu, M. Ammar, and S. Moon. Prefix-preserving IP address anonymization. Computer Networks, 46(2):253-272, Oct. 2004.
14. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh. Terra: a virtual machine-based platform for trusted computing. In Symposium on Operating Systems Principles, 2003.
15. O. Goldreich. Secure multi-party computation. Working draft, Version 1.4, Oct. 2002. 〈http://www.wisdom.weizmann.ac.il/~odedg/pp.html〉.
16. H. Kargupta, S. Datta, Q. Wang, and K. Sivakumar. Random data perturbation techniques and privacy preserving data mining. Knowledge and Information Systems Journal, 7(4):387-414, 2005. (Pubitemid 41166792)
17. S. Katti, B. Krishnamurthy, and D. Katabi. Collaborating against common enemies. In Internet Measurement Conference, 2005.
18. T. Kohno, A. Broido, and K. Claffy. Remote physical device fingerprinting. IEEE Transactions on Dependable and Secure Computing, 2(2), Apr.-Jun. 2005.
19. H. Krawczyk, M. Bellare, and R. Canetti. HMAC: Keyed-hashing for message authentication. IETF RFC 2104, Feb. 1997. 〈http://www.ietf.org/rfc/rfc2104. txt〉.
20. P. Lincoln, P. Porras, and V. Shmatikov. Privacy-preserving sharing and correlation of security alerts. In Proceedings of the 13th USENIX Security Symposium, Aug. 2004.
21. McAfee IntruShield Security Manager. Web site, May 2006. 〈http://www.mcafee.com/us/enterprise/products/network-intrusion-prevention/ intrushield-security-management-system.html〉.
22. A. Mounji, B. L. Charlier, D. Zampunieris, and N. Habra. Distributed audit trail analysis. In Proceedings of the Internet Society Symposium on Network and Distributed System Security, Feb. 1995.
23. P. Paillier. Public-key cryptosystems based on composite degree residuosity classes. In J. Stern, editor, Advances in Cryptology - EUROCRYPT '99, volume 1592 of Lecture Notes in Computer Science, pages 223-238. Springer-Verlag, 1999.
24. R. Pang, M. Allman, V. Paxson, and J. Lee. The devil and packet trace anonymization. Computer Communication Review, Jan. 2006.
25. R. Pang and V. Paxson. A high-level programming environment for packet trace anonymization and transformation. In Proceedings of the 2003 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM'03), 2003.
26. V. Paxson. Bro: a system for detecting network intruders in real-time. Computer Networks, 31(23-24):2435-2463, 1999.
27. Planetlab. Web site, May 2006. 〈http://www.planet-lab.org/php/pr/ 〉.
28. P. Roberts. Update: Hackers breach supercomputer centers. COMPUTERWORLD Security, Apr. 2004. 〈http://www.teragrid.org/news/apps/0404/ computerworld2.html〉.
29. M. Roesch. Snort, intrusion detection system. Web site, May 2006. 〈http://www.snort.org〈.
30. A. Slagell, K. Lakkaraju, and K. Luo. FLAIM: A multi-level anonymization framework for computer and network logs. In 20th USENIX Large Installation System Administration Conference, Dec. 2006.
31. S. R. Snapp, J. Brentano, G. V. Dias, T. L. Goan, L. T. Heberlein, C.-L. Ho, K. N. Levitt, B. Mukherjee, S. E. Smaha, T. Grance, D. M. Teal, and D. Mansur. DIDS (distributed intrusion detection system) - motivation, architecture, and an early prototype. In Proc. 14th NIST-NCSC National Computer Security Conference, 1991.
32. M. Steiner, G. Tsudik, and M. Waidner. Diffie-Hellman key distribution extended to group communication. In Proceedings of the 3rd ACM Conference on Computer and Communications Security (CCS'96), pages 31-37, 1996.
33. Tcpdump public repository. Web site, May 2006. 〈http://www.tcpdump. org〉.
34. V. S. Verykios, E. Bertino, I. N. Fovino, L. P. Provenza, Y. Saygin, and Y. Theodoridis. State-of-the-art in privacy preserving data mining. SIGMOD Record, 33(1):50-57, 2004. (Pubitemid 40290240)
35. Y.-S. Wu, B. Foo, Y. Mei, and S. Bagchi. Collaborative intrusion detection system (CIDS): A framework for accurate and efficient IDS. In Proceedings of the 19th Annual Computer Security Applications Conference (ACSAC'03), Dec. 2003.
36. A. C. Yao. Protocols for secure computation. In Proceedings of the 23rd IEEE Symposium on the Foundations of Computer Science, 1982.
37. V. Yegneswaran, P. Barford, and S. Jha. Global intrusion detection in the DOMINO overlay system. In Proceedings of the The 11th Annual Network and Distributed System Security Symposium (NDSS'04), 2004.
38. T. Ylonen and C. Lonvick. The secure shell (SSH) transport layer protocol. IETF RFC 4253, Jan. 2006. 〈http://www.ietf.org/rfc/rfc4253. txt〉.
39. Y. Zhang and V. Paxson. Detecting stepping stones. In Proceedings of the 9th Annual USENIX Security Symposium, Aug. 2000.