Abstract
Anonymous communication (AC) protocols such as the widely used Tor network have been designed to provide anonymity over the Internet to their participating users. While AC protocols have been the subject of several security and anonymity analyses in the last years, there still does not exist a framework for analyzing these complex systems and their different anonymity properties in a unified manner.
In this work we present AnoA: a generic framework for defining, analyzing, and quantifying anonymity properties for AC protocols. In addition to quantifying the (additive) advantage of an adversary in an indistinguishability-based definition, AnoA uses a multiplicative factor, inspired from differential privacy. AnoA enables a unified quantitative analysis of well-established anonymity properties, such as sender anonymity, sender unlinkability, and relationship anonymity. AnoA modularly specifies adversarial capabilities by a simple wrapper-construction, called adversary classes. We examine the structure of these adversary classes and identify conditions under which it suffices to establish anonymity guarantees for single messages in order to derive guarantees for arbitrarily many messages. This then leads us to the definition of Plug’n’Play adversary classes (PAC), which are easy-to-use, expressive, and satisfy this condition. We prove that our framework is compatible with the universal composability (UC) framework and show how to apply AnoA to a simplified version of Tor against passive adversaries, leveraging a recent realization proof in the UC framework.
Publisher
Journal of Privacy and Confidentiality
Subject
Computer Science Applications,Statistics and Probability,Computer Science (miscellaneous)
Cited by
4 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献
1. Anonymity and everlasting privacy in electronic voting;International Journal of Information Security;2023-02-15
2. SoK on Performance Bounds in Anonymous Communication;Proceedings of the 19th Workshop on Privacy in the Electronic Society;2020-11-09
3. Comprehensive Anonymity Trilemma: User Coordination is not enough;Proceedings on Privacy Enhancing Technologies;2020-07-01
4. On Privacy Notions in Anonymous Communication;Proceedings on Privacy Enhancing Technologies;2019-04-01