loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
2008 Third International Conference on Availability, Reliability and Security
Privacy/Analysis Tradeoffs in Sharing Anonymized Packet Traces: Single-Field Case
March 04-March 07
ISBN: 978-0-7695-3102-1
Network data needs to be shared for distributed security analysis. Anonymization of network data for sharing sets up a fundamental tradeoff between privacy protection versus security analysis capability. This privacy/analysis tradeoff has been acknowledged by many researchers but this is the first paper to provide empirical measurements to characterize the privacy/analysis tradeoff for an enterprise dataset. Specifically we perform anonymization options on single-fields within network packet traces and then make measurements using intrusion detection system alarms as a proxy for security analysis capability. Our results show: (1) two fields have a zero sum tradeoff (more privacy lessens security analysis and vice versa) and (2) eight fields have a more complex tradeoff (that is not zero sum) in which both privacy and analysis can both be simultaneously accomplished.
Index Terms:
privacy-enhanced security data sharing
Citation:
William Yurcik, Clay Woolam, Greg Hellings, Latifur Khan, Bhavani Thuraisingham, "Privacy/Analysis Tradeoffs in Sharing Anonymized Packet Traces: Single-Field Case," ares, pp.237-244, 2008 Third International Conference on Availability, Reliability and Security, 2008
Usage of this product signifies your acceptance of the Terms of Use.