A Survey of Network Traffic Anonymisation Techniques and Implementations

Author:

Dijkhuizen Niels Van1,Ham Jeroen Van Der2ORCID

Affiliation:

1. Netherlands Ministry of Defence, Netherlands

2. National Cyber Security Centre, The Netherlands and University of Amsterdam, The Hague, Netherlands

Abstract

Many networking research activities are dependent on the availability of network captures. Even outside academic research, there is a need for sharing network captures to cooperate on threat assessments or for debugging. However, most network captures cannot be shared due to privacy concerns. Anonymisation of network captures has been a subject of research for quite some time, and many different techniques exist. In this article, we present an overview of the currently available techniques and implementations for network capture anonymisation. There have been many advances in the understanding of anonymisation and cryptographic methods, which have changed the perspective on the effectiveness of many anonymisation techniques. However, these advances, combined with the increase of computational abilities, may have also made it feasible to perform anonymisation in real time. This may make it easier to collect and distribute network captures both for research and for other applications. <?tight?>This article surveys the literature over the period of 1998–2017 on network traffic anonymisation techniques and implementations. The aim is to provide an overview of the current state of the art and to highlight how advances in related fields have shed new light on anonymisation and pseudonimisation methodologies. The few currently maintained implementations are also reviewed. Last, we identify future research directions to enable easier sharing of network traffic, which in turn can enable new insights in network traffic analysis.

Funder

Dutch National Coordinator for Security and Counterterrorism

Publisher

Association for Computing Machinery (ACM)

Subject

General Computer Science,Theoretical Computer Science

Reference86 articles.

1. Correlating network events and transferring labels in the presence of IP address anonymisation

2. Libtrace

3. Issues and etiquette concerning use of shared measurement data

4. E. Blanton. 2008. TCPurify. Retrieved November 7 2017 from http://web.archive.org/web/20110820174616/http://masaka.cs.ohiou.edu/∼eblanton/tcpurify/. E. Blanton. 2008. TCPurify. Retrieved November 7 2017 from http://web.archive.org/web/20110820174616/http://masaka.cs.ohiou.edu/∼eblanton/tcpurify/.

Cited by 10 articles. 订阅此论文施引文献 订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献

1. A configurable anonymisation approach for network flow data: Balancing utility and privacy;Computers and Electrical Engineering;2024-09

2. Incremental federated learning for traffic flow classification in heterogeneous data scenarios;Neural Computing and Applications;2024-08-12

3. Towards Anonymizing Intermodal Mobility Data for Smart Cities;Proceedings of the 1st ACM SIGSPATIAL International Workshop on Geo-Privacy and Data Utility for Smart Societies;2023-11-13

4. Characterizing Wireless Link Throughput with eBPF and Hardware Timestamps;2023 IEEE 28th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD);2023-11-06

5. A Self-adaptive and Secure Approach to Share Network Trace Data;Digital Threats: Research and Practice;2023-10-20

同舟云学术

1.学者识别学者识别

2.学术分析学术分析

3.人才评估人才评估

"同舟云学术"是以全球学者为主线,采集、加工和组织学术论文而形成的新型学术文献查询和分析系统,可以对全球学者进行文献检索和人才价值评估。用户可以通过关注某些学科领域的顶尖人物而持续追踪该领域的学科进展和研究前沿。经过近期的数据扩容,当前同舟云学术共收录了国内外主流学术期刊6万余种,收集的期刊论文及会议论文总量共计约1.5亿篇,并以每天添加12000余篇中外论文的速度递增。我们也可以为用户提供个性化、定制化的学者数据。欢迎来电咨询!咨询电话:010-8811{复制后删除}0370

www.globalauthorid.com

TOP

Copyright © 2019-2024 北京同舟云网络信息技术有限公司
京公网安备11010802033243号  京ICP备18003416号-3