FLAIM: A multi-level anonymization framework for computer and network logs

LISA 2006 - 20th Large Installation System Administration Conference

Volumn , Issue , 2006, Pages 63-77

  Slagell, Adam ^a   Lakkaraju, Kiran ^a   Luo, Katherine ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INFORMATION MANAGEMENT;

ANONYMIZATION; COMPUTER AND NETWORKS; FINE GRAINED; INFORMATION LOSS; IT SUPPORTS; MULTILEVELS; SYSTEM ADMINISTRATORS; TRADE OFF;

ECONOMIC AND SOCIAL EFFECTS;

EID: 84886395955     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. Biskup, J., and Flegel, U., "On Pseudonymization of Audit Data for Intrusion Detection," USENIX Workshop on Design Issues in Anonymity and Unobservability, Jul., 2000
2. Biskup, J., and Flegel, U., "Transaction-Based Pseudonyms in Audit Data for Privacy Respecting Intrusion Detection," Third International Workshop on the Recent Advances in Intrusion Detection (RAID 2000), Toulouse, France, Oct., 2000
3. Bloom, B. H., "Space/Time Trade-offs in Hash Coding with Allowable Errors," Communications of the ACM, Vol. 13, Num. 7, pp. 422-426, 1970
4. Flegel, U., "Pseudonymizing UNIX Log Files," Infrastructure Security, International Conference (InfraSec 2002), Bristol, UK, Oct, 2002
5. Gorman, S., "NSA Killed System that Sifted Phone Data Legally," The Baltimore Sun, May 17, 2006
6. IANA IPv4 Protocol Numbers Assignment, http:// www.iana.org/assignments/protocol-numbers, Mar., 2006
7. Markoff, J., and Bergman, L., "Internet Attack is called Broad and Long Lasting," New York Times, Sec. A, Col. 1, p. 1, May 10, 2005
8. Lincoln, P., Porras, P., and Shmatikov, V., "Privacy-Preserving Sharing and Correlation of Security Alerts," 13th USENIX Security Symposium, San Diego, CA, Aug., 2004
9. Lundin, E., and Jonsson, E., "Privacy vs Intrusion Detection Analysis," Second International Wo r k s h o p on the Recent Advances in Intrusion Detection (RAID ?99), West Lafayette, IN, Sep., 1999
10. Pang, R., and Paxson, V., "A High-Level Programming Environment for Packet Trace Anonymization and Transformation," ACM SIGCOMM Conference, Karlsruhe, Germany, Aug., 2003
11. Pang, R., Allman, M., Paxson, V., and Lee, J., "The Devil and Packet Trace Anonymization," ACM SIGCOMM Computer Communications Review, Vol. 36, Num. 1, pp. 29-38, Jan., 2006
12. Poulsen, K., "California Reports Massive Data Breach," SecurityFocus News, http://www. securityfocus.com/, October 19, 2004
13. Shannon, C., Moore, D., and Keys, K., "The Internet Measurement Data Catalog," ACM SIGCOMM Computer Communications Review, Vol. 35, Num. 5, pp. 97-100, Oct., 2005
14. Slagell, A., Wang, J., and Yurcik, W., "Network Log Anonymization: Application of Crypto-PAn to Cisco NetFlows," Wo r k s h o p on Secure Knowledge Management, Buffalo, NY, Sep., 2004
15. Slagell, A., and Yurcik, W., "Sharing Compuer and Network Logs for Security and Privacy: A Motivation for New Methodologies of Anonymization," ACM Computing research Repository (CoRR), Technical Report cs.CR/0409005; Sep., 2004
16. Slagell, A., and Yurcik, W., "Sharing Computer Network Logs for Security and Privacy: A Motivation for New Methodologies of Anonymization," SECOVAL: The Workshop on the Value of Security through Collaboration, Athens, Greece, Sep., 2005
17. Slagell, A., Li, Y., and Luo, K., "Sharing Network Logs for Computer Forensics: A New tool for the Anonymization of NetFlow Records," Computer Network Forensics Research Workshop, Athens, Greece, Sep., 2005
18. Sobirey, M., Fischer-Hubner, S., and Rannenburg, K., "Pseudonymous Audit for Privacy Enhanced Intrusion Detection," IFIP TC11 13th International Conference on Information Security, Copenhagen, Denmark, May, 1997
19. Vrable, M., Ma, J., Chen, J., Moore, D., Vandekieft, E., Snoeren, A., Voelker, G., and Savage, S., "Scalability, Fidelity and Containment in the Potemkin Virtual Honeyfarm," 20th ACM Symposium on Operating Systems Principles (SOSP 2005), Brighton, UK, Oct., 2005
20. Xu, J., Fan, J., Ammar, M. H., and Moon, S. B., "On the Design and Performance of Prefix-Preserving IP Traffic Trace Anonymization," ACM SIGCOMM Internet Measurement Workshop, San Francisco, CA, Nov., 2001
21. Xu, J., Fan, J., Ammar, M. H., and Moon, S. B., "Prefix-Preserving IP Address Anonymization: Measurement-based Security Evaluation and a New Cryptography-based Scheme," 10th IEEE International Conference on Network Protocols, Paris, France, Nov., 2002
22. Yin, X., Yurcik, W., and Slagell, A., "The Design of VisFlowConnect-IP: A Link Analysis System for IP Security Situational Awareness," First International Workshop on Information Assurance (IWIA), College Park, MD, Mar., 2005