Privacy-Preserving Distributed Network Troubleshooting—Bridging the Gap Between Theory and Practice

ACM Transactions on Information and System Security

Volumn 14, Issue 4, 2011, Pages 1-30

  Burkhart, Martin ^a   Dimitropoulos, Xenofontas ^a  

^a ETH ZURICH   (Switzerland)

Author keywords

aggregation; Algorithms; anomaly detection; Applied cryptography; collaborative network security; Design; Experimentation; Measurement; network management; root cause analysis; secure multiparty computation; Security

Indexed keywords

EID: 84893345636     PISSN: 10949224     EISSN: 15577406     Source Type: Journal    
DOI: 10.1145/2043628.2043632     Document Type: Article

References (55)

1. Aggarval, G. Mishra, N., and Pinkas, B. 2004. Secure Computation of the kth-Ranked Element. In Proceedings of the EUROCRYPT.
2. Akbarinia, R., PACITTI, E., and Valduriez, P. 2007. Best position algorithms for top-k queries. In Proceedings of the International Conference on Very Large Data Bases (VLDB).
3. Applebaum, B., Ringberg, H., Freedman, M. J., CAESAR, M., and REXFORD, J. 2010. Collaborative, privacy-preserving data aggregation at scale. In Proceedings of the Privacy Enhancing Technologies Symposium (PETS).
4. Babcock, B. and Olston, C. 2003. Distributed top-k monitoring. In Proceedings of the ACM SIGMOD International Conference on Management of Data.
5. Bar-Ilan, J. and Beaver, D. 1989. Non-cryptographic fault-tolerant computing in constant number of rounds of interaction. In Proceedings of the ACM Symposium on Principles of Distributed Computing (PODC).
6. Beaver, D., Micali, S., and Rogaway, P. 1990. The round complexity of secure protocols. In Proceedings of the ACM Symposium on Theory of Computing (STOC).
7. Ben-David, A., Nisan, N., and Pinkas, B. 2008. FairplayMP: a system for secure multi-party computation. In Proceedings of the Conference on Computer and Communications Security (CCS).
8. Ben-Or, M., Goldwasser, S., and Wigderson, A. 1988. Completeness theorems for non-cryptographic fault-tolerant distributed computation. In Proceedings of the ACM Symposium on Theory of Computing (STOC).
9. Bethencourt, J., Franklin, J., and Vernon, M. 2005. Mapping internet sensors with probe response attacks. In Proceedings of the 14th USENIX Security Symposium.
10. Bogdanov, D., LAUR, S., and Willemson, J. 2008. Sharemind: A Framework for Fast Privacy-Preserving Computations. In Proceedings of the European Symposium on Research in Computer Security (ESORICS).
11. Bogetoft, P., Christensen, D., Damgard, I., Geisler, M., Jakobsen, T., Kroigaard, M., Nielsen, J., Nielsen, J., Nielsen, K., Pagter, J., et al. 2009. Secure multiparty computation goes live. In Proceedings of the Financial Cryptography Association.
12. Brauckhoff, D., Dimitropoulos, X., Wagner, A., and Salamatian, K. 2009a. Anomaly extraction in backbone networks using association rules. In Proceedings of the Internet Measurement Conference (IMC).
13. Brauckhoff, D., Salamatian, K., and May, M. 2009b. Applying PCA for Traffic Anomaly Detection: Problems and Solutions. In Proceedings of INFOCOM.
14. BURkhart, M. and Dimitropoulos, X. 2010. Fast privacy-preserving top-k queries using secret sharing. In Proceedings of the International Conference on Computer Communications and Networks (ICCCN).
15. Burkhart, M. Strasser, M. Many, D. and Dimitropoulos, X. 2010. SEPIA: Privacy-Preserving Aggregation of Multi-Domain Network Events and Statistics. In Proceedings of the 19th USENIX Security Symposium.
16. Canetti, R. 2001. Universally composable security: A new paradigm for cryptographic protocols. In Proceedings of the IEEE Symposium on Foundations of Computer Science (FOCS).
17. Chang, K. and Hwang, S. 2002. Minimal probing: Supporting expensive predicates for top-k queries. In Proceedings of the ACM SIGMOD International Conference on Management of Data.
18. Chow, S. S. M., Lee, J.-H., and Subramanian, L. 2009. Two-party computation model for privacy-preserving queries over distributed databases. in Proceedings of the Network and Distributed Systems Society Symposium (NDSS). The Internet Society.
19. Damgard, I. Fitzi, M. Kiltz, E. Nielsen, J. and Toft, T. 2006. Unconditionally secure constant-rounds multiparty computation for equality, comparison, bits and exponentiation. In Proceedings of the Theory of Cryptography Conference (TCC).
20. Damgard, I. Geisler, M. Kroigaard, M. and Nielsen, J. 2009. Asynchronous multiparty computation: Theory and implementation. In Proceedings of the Conference on Practice and Theory in Public Key Cryptography (PKC).
21. Damgard, I., Meldgaard, S., and Nielsen, J. B. 2011. Perfectly Secure Oblivious RAM Without Random Oracles. In Proceedings of the Theory of Cryptography Conference (TCC).
22. Duan, Y. 2009. Differential privacy for sum queries without external noise. In Proceedings of the ACM Conference on Information and Knowledge Management (CIKM).
23. Dwork, C. 2008. Differential privacy: A survey of results. In Proceedings of the Conference on Theory and Applications of Models of Computation (TAMC).
24. Fagin, R. 1996. Combining fuzzy information from multiple systems. In Proceedings of the ACM SIGACT-SIGMOD-SIGART Symposium on Principles of Database Systems.
25. Fagin, R., Lotem, A., and Naor, M. 2001. Optimal aggregation algorithms for middleware. In Proceedings of the ACM SIGMOD-SIGACT-SIGART Symposium on Principles of Database Systems (PODS).
26. Freedman, M. J., Nissim, K., and Pinkas, B. 2004. Efficient private matching and set intersection. In Proceedings of the EUROCRYPT. Lecture Notes in Computer Science, vol. 3027, Springer Berlin, 1-19.
27. Gennaro, R., Ishai, Y., Kushilevitz, E., and Rabin, T. 2002. On 2-round secure multiparty computation. In Proceedings of CRYPTO.
28. Gennaro, R., Rabin, M., and Rabin, T. 1998. Simplified VSS and fast-track multiparty computations with applications to threshold cryptography. In Proceedings of the 7th Annual ACM Symposium on Principles of Distributed Computing (PODC).
29. Goldreich, O., Micali, S., and Wigderson, A. 1987. How to play any mental game. In Proceedings of the ACM Symposium on the Theory of Computing (STOC).
30. Lakhina, A., Crovella, M., and Diot, C. 2005. Mining anomalies using traffic feature distributions. In Proceedings of the ACM SIGCOMM Data Communications Festival.
31. Lee, A. J. Tabriz, P., and Borisov, N. 2006. Aprivacy-preserving interdomain audit framework. In Proceedings of the Workshop on Privacy in Electronic Society (WPES).
32. Li, X., Bian, F., Crovella, M., Diot, C., Govindan, R., Iannaccone, G., and Lakhina, A. 2006. Detection and identification of network anomalies using sketch subspaces. In Proceedings of the Internet Measurement Conference (IMC).
33. Lincoln, P., Porras, P., and Shmatikov, V. 2004. Privacy-preserving sharing and correlation of security alerts. In Proceedings of the 13th USENIX Security Symposium.
34. Machiraju, S. and Katz, R. H. 2004. Verifying global invariants in multi-provider distributed systems. In Proceedings of the SlGCOMM Workshop on Hot Topics in Networking (HotNets). ACM.
35. Marian, A., Bruno, N., and Gravano, L. 2004. Evaluating top-k queries over web-accessible databases. ACM Trans. Datab. Syst. 29, 2, 319-362.
36. Mcsherry, F. and Mahajan, R. 2010. Differentially-private network trace analysis. In Proceedings of the ACM SlGCOMM Data Communications Festival.
37. Nishide, T. and Ohta, K. 2007. Multiparty computation for interval, equality, and comparison without bit-decomposition protocol. In Proceedings of the Conference on Theory and Practice of Public Key Cryptography (PKC).
38. Parekh, J. J., Wang, K., and Stolfo, S. J. 2006. Privacy-preserving payload-based correlation for accurate malicious traffic detection. In Proceedings of the ACM Workshop on Large-Scale Attack Defense (LSAD).
39. Ranjan, S., Shah, S., Nucci, A., Munafo, M. M., Cruz, R. L., and Muthukrishnan, S. M. 2007. Dowitcher: Effective worm detection and containment in the internet core. In Proceedings of INFOCOM.
40. Ringberg, H. 2009. Privacy-preserving collaborative anomaly detection. Ph.D. thesis, Princeton University.
41. Rossi, D., Mellia, M., and Meo, M. 2009. Understanding Skype signaling. Comput. Netw. 53, 2, 130-140.
42. Roughan, M. and Zhang, Y. 2006a. Privacy-preserving performance measurements. In Proceedings of the SlGCOMM Workshop on Mining Network Data (MineNet).
43. Roughan, M. and Zhang, Y. 2006b. Secure distributed data-mining and its application to large-scale network measurements. Comput. Comm. Rev. 36, 1, 7-14.
44. Sang, Y., Shen, H., Tan, Y., and Xiong, N. 2006. Efficient protocols for privacy preserving matching against distributed datasets. In Proceedings of the Conference on Information and Communications Security (ICICS).
45. Shamir, A. 1979. How to share a secret. Comm. ACM 22, 11, 612-613.
46. Shmatikov, V. and Wang, M. 2007. Security against probe-response attacks in collaborative intrusion detection. In Proceedings of the ACM Workshop on Large-scale Attack Defense (LSAD).
47. Stolfo, S. J. 2004. Worm and attack early warning. IEEE Secur. Priv. 2, 3, 73-75.
48. Switch. The Swiss education and research network. http://www.switch.ch.
49. Tariq, M. B., Motiwala, M., Feamster, N., and Ammar, M. 2009. Detecting network neutrality violations with causal inference. In Proceedings of the Conference on Emerging Networking Experiments and Technologies (CoNEXT).
50. Tellenbach, B., Burkhart, M., Schatzmann, D., Gugelmann, D., and Sornette, D. 2011. Accurate network anomaly classification with generalized entropy metrics. Comput. Netw. 55, 15, 3485-3502.
51. Vaidya, J. and Clifton, C. 2005. Privacy-preserving top-k queries. In Proceedings of the IEEE International Conference on Data Engineering (ICDE).
52. Vaidya, J. and Clifton, C. 2009. Privacy-preserving kth element score over vertically partitioned data. IEEE Trans. Knowl. Data 21, 2, 253-258.
53. Xiong, L., Chitti, S., and Liu, L. 2005. Topk queries across multiple private databases. In Proceedings of the IEEE International Conference on Distributed Computing Systems (ICDCS).
54. YAO, A. 1982. Protocols for secure computations. In Proceedings of the IEEE Symposium on Foundations of Computer Science.
55. Yegneswaran, V., Barford, P., and Jha, S. 2004. Global intrusion detection in the DOMINO overlay system. In Proceedings of the Network and Distributed System Security Symposium (NDSS).