Affiliation:
1. Netherlands Ministry of Defence, Netherlands
2. National Cyber Security Centre, The Netherlands and University of Amsterdam, The Hague, Netherlands
Abstract
Many networking research activities are dependent on the availability of network captures. Even outside academic research, there is a need for sharing network captures to cooperate on threat assessments or for debugging. However, most network captures cannot be shared due to privacy concerns.
Anonymisation of network captures has been a subject of research for quite some time, and many different techniques exist. In this article, we present an overview of the currently available techniques and implementations for network capture anonymisation.
There have been many advances in the understanding of anonymisation and cryptographic methods, which have changed the perspective on the effectiveness of many anonymisation techniques. However, these advances, combined with the increase of computational abilities, may have also made it feasible to perform anonymisation in real time. This may make it easier to collect and distribute network captures both for research and for other applications.
<?tight?>This article surveys the literature over the period of 1998–2017 on network traffic anonymisation techniques and implementations. The aim is to provide an overview of the current state of the art and to highlight how advances in related fields have shed new light on anonymisation and pseudonimisation methodologies. The few currently maintained implementations are also reviewed. Last, we identify future research directions to enable easier sharing of network traffic, which in turn can enable new insights in network traffic analysis.
Funder
Dutch National Coordinator for Security and Counterterrorism
Publisher
Association for Computing Machinery (ACM)
Subject
General Computer Science,Theoretical Computer Science
Reference86 articles.
1. Correlating network events and transferring labels in the presence of IP address anonymisation
2. Libtrace
3. Issues and etiquette concerning use of shared measurement data
4. E. Blanton. 2008. TCPurify. Retrieved November 7 2017 from http://web.archive.org/web/20110820174616/http://masaka.cs.ohiou.edu/∼eblanton/tcpurify/. E. Blanton. 2008. TCPurify. Retrieved November 7 2017 from http://web.archive.org/web/20110820174616/http://masaka.cs.ohiou.edu/∼eblanton/tcpurify/.
Cited by
10 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献
1. A configurable anonymisation approach for network flow data: Balancing utility and privacy;Computers and Electrical Engineering;2024-09
2. Incremental federated learning for traffic flow classification in heterogeneous data scenarios;Neural Computing and Applications;2024-08-12
3. Towards Anonymizing Intermodal Mobility Data for Smart Cities;Proceedings of the 1st ACM SIGSPATIAL International Workshop on Geo-Privacy and Data Utility for Smart Societies;2023-11-13
4. Characterizing Wireless Link Throughput with eBPF and Hardware Timestamps;2023 IEEE 28th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD);2023-11-06
5. A Self-adaptive and Secure Approach to Share Network Trace Data;Digital Threats: Research and Practice;2023-10-20