On the Privacy Risks of Publishing Anonymized IP Network Traces Export

@incollection{koukis:traces, abstract = {Networking researchers and engineers rely on network packet traces for understanding network behavior, developing models, and evaluating network performance. Although the bulk of published packet traces implement a form of address anonymization to hide sensitive information, it has been unclear if such anonymization techniques are sufficient to address the privacy concerns of users and organizations. In this paper we attempt to quantify the risks of publishing anonymized packet traces. In particular, we examine whether statistical identification techniques can be used to uncover the identities of users and their surfing activities from anonymized packet traces. Our results show that such techniques can be used by any Web server that is itself present in the packet trace and has sufficient resources to map out and keep track of the content of popular Web sites to obtain information on the network-wide browsing behavior of its clients. Furthermore, we discuss how scan sequences identified in the trace can easily reveal the mapping from anonymized to real IP addresses.}, author = {Koukis, D. and Antonatos, S. and Anagnostakis, K.}, citeulike-article-id = {5297431}, citeulike-linkout-0 = {http://dx.doi.org/10.1007/11909033_3}, citeulike-linkout-1 = {http://www.springerlink.com/content/t467m2665382l873}, doi = {10.1007/11909033_3}, journal = {Communications and Multimedia Security}, keywords = {anonymity, data-sharing, network-measurement, privacy}, pages = {22--32}, posted-at = {2009-07-29 08:50:53}, priority = {2}, title = {On the Privacy Risks of Publishing Anonymized IP Network Traces}, url = {http://dx.doi.org/10.1007/11909033_3}, year = {2006} }

TY - CHAP ID - koukis:traces L3 - citeulike-article-id:5297431 N2 - Networking researchers and engineers rely on network packet traces for understanding network behavior, developing models, and evaluating network performance. Although the bulk of published packet traces implement a form of address anonymization to hide sensitive information, it has been unclear if such anonymization techniques are sufficient to address the privacy concerns of users and organizations. In this paper we attempt to quantify the risks of publishing anonymized packet traces. In particular, we examine whether statistical identification techniques can be used to uncover the identities of users and their surfing activities from anonymized packet traces. Our results show that such techniques can be used by any Web server that is itself present in the packet trace and has sufficient resources to map out and keep track of the content of popular Web sites to obtain information on the network-wide browsing behavior of its clients. Furthermore, we discuss how scan sequences identified in the trace can easily reveal the mapping from anonymized to real IP addresses. JF - Communications and Multimedia Security EP - 32 TI - On the Privacy Risks of Publishing Anonymized IP Network Traces SP - 22 KW - anonymity KW - data-sharing KW - network-measurement KW - privacy AU - Koukis, D AU - Antonatos, S AU - Anagnostakis, K PY - 2006/// UR - http://dx.doi.org/10.1007/11909033_3 ER -