Security and Privacy in Communication Networks. 11th International Conference, SecureComm 2015, Dallas, TX, USA, October 26-29, 2015, Revised Selected Papers

Research Article

POSTER: An Online Prefix-Preserving IP Address Anonymization Algorithm for Passive Measurement Systems

Download
266 downloads
  • @INPROCEEDINGS{10.1007/978-3-319-28865-9_35,
        author={Kai Cao and Yunchun Li and Hailong Yang and Jiqiang Tang and Xiaoxiang Zou},
        title={POSTER: An Online Prefix-Preserving IP Address Anonymization Algorithm for Passive Measurement Systems},
        proceedings={Security and Privacy in Communication Networks. 11th International Conference, SecureComm 2015, Dallas, TX, USA, October 26-29, 2015, Revised Selected Papers},
        proceedings_a={SECURECOMM},
        year={2016},
        month={2},
        keywords={IP address anonymization Dynamic subtree-scheduling Crypto-PAn},
        doi={10.1007/978-3-319-28865-9_35}
    }
    
  • Kai Cao
    Yunchun Li
    Hailong Yang
    Jiqiang Tang
    Xiaoxiang Zou
    Year: 2016
    POSTER: An Online Prefix-Preserving IP Address Anonymization Algorithm for Passive Measurement Systems
    SECURECOMM
    Springer
    DOI: 10.1007/978-3-319-28865-9_35
Kai Cao1, Yunchun Li1,*, Hailong Yang1, Jiqiang Tang2, Xiaoxiang Zou2
  • 1: Beihang University
  • 2: National Computer Network Emergency Response Technical Team/Coordination Center (CNCERT/CC)
*Contact email: lych@buaa.edu.cn

Abstract

To strike a balance between usefulness of network traces and privacy protection, offline prefix-preserving anonymization has been studied extensively to anoymize IP addresses while preserving their prefix nature. In this paper, a novel Dynamic Subtree-scheduling Packet Anonymization scheme called DS-PAn is developed for measurement systems based on the prefix-preserving algorithm Crypto-PAn. DS-PAn makes online anoymization practical to be operated at a high rate, while using less memory compared to precomputed Crypto-PAn. Performance evaluations validate that the proposed algorithm outperforms the conventional anonymization mechanism in terms of computation speed as well as memory requirement.