Prefix-preserving IP address anonymization: measurement-based security evaluation and a new cryptography-based scheme

By Jinliang Fan, Jun Xu, Mostafa H. Ammar, Sue B. Moon. 10th IEEE International Conference on Network Protocols, 2002. Proceedings., 2002

363 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Networks and Communications, Hardware and Architecture

View Paper: https://www.semanticscholar.org/paper/f60ffe116824befac67bcb51535a00cb2ef2bce6

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Computer Networks and Communications

In Hardware and Architecture

Citations in the corpus

An empirical evaluation of entropy-based traffic anomaly detection (2008, methodology): “IP addresses in the dataset were anonymized preserving a one-to-one mapping between actual and anonymized IP addresses [ 19 ].”
Sonata: query-driven streaming network telemetry (2018, methodology): “This data contains no layer-2 headers or packet payloads, and the layer-3 headers were anonymized with a prefix-preserving algorithm [13].”
Anomaly-based network intrusion detection: Techniques, systems and challenges (2009, background): “Some researchers propose anonymity through IP address masquerading (Fan et al., 2004), which has the advantage of real traffic while avoiding the problem of ciphering.”
Order-Preserving Encryption Revisited: Improved Security Analysis and Alternative Solutions (2011, background): “The work of [16] suggested enabling efficient range queries on encrypted data not by using OPE but socalled prefix-preserving encryption (PPE) [22,5].”
Inference Attacks on Property-Preserving Encrypted Databases (2015, neutral): “Brekne, ˆArnes and Øslebø [16] describe frequency attacks for recovering IP addresses anonymized under a preﬁx-preserving encryption scheme [38].”
Order-Preserving Symmetric Encryption (2009, background): “Unfortunately, as discussed in [22,2], PPE schemes are subject to certain attacks in this context; particular queries can completely reveal some of the underlying plaintexts in the database.”
A survey of covert channels and countermeasures in computer network protocols (2007, background): “described an attack on network traffic trace file anonymisation through covert channels [20] and Bethencourt et al.”
Differentially-private network trace analysis (2010, methodology): “However, many researchers have shown that anonymization is vulnerable to attacks that can extract sensitive information from the traces [5, 26, 31, 21].”
Remote physical device fingerprinting (2005, methodology): “One can also use our techniques to catalyze the unanonymization of prefixpreserving anonymized network traces [36], [ 37 ].”