论文标题

在填充约束下最小化信息泄漏

Minimizing Information Leakage under Padding Constraints

论文作者

Simon, Sebastian, Petrui, Cezara, Pinzón, Carlos, Palamidessi, Catuscia

论文摘要

攻击者可以通过分析其网络流量来获取用户的信息。传输数据的大小泄漏有关要传输文件或所使用的服务的信息,这在攻击者具有有关可转让的文件或服务的背景知识时尤其揭示。为了防止这种情况,服务器可以使用填充方案填充文件,更改文件大小并阻止任何人唯一猜测其身份。这项工作着重于寻找最佳的填充方案,这些方案在隐私和带宽增加之间保持平衡。我们将Rényi-Min泄漏视为我们隐私的主要措施,因为它与简单攻击者的成功直接相关,并将我们的算法与现有解决方案进行比较,该解决方案将香农泄漏最小化。我们为我们的算法提供了改进,以优化平均总填充物和香农泄漏,同时最大程度地减少Rényi-Min泄漏。此外,我们的算法旨在处理一个更一般和重要的方案,其中多个服务器希望以保护服务器身份以外的方式来计算填充方案。

An attacker can gain information of a user by analyzing its network traffic. The size of transferred data leaks information about the file being transferred or the service being used, and this is particularly revealing when the attacker has background knowledge about the files or services available for transfer. To prevent this, servers may pad their files using a padding scheme, changing the file sizes and preventing anyone from guessing their identity uniquely. This work focuses on finding optimal padding schemes that keep a balance between privacy and the costs of bandwidth increase. We consider Rényi-min leakage as our main measure for privacy, since it is directly related with the success of a simple attacker, and compare our algorithms with an existing solution that minimizes Shannon leakage. We provide improvements to our algorithms in order to optimize average total padding and Shannon leakage while minimizing Rényi-min leakage. Moreover, our algorithms are designed to handle a more general and important scenario in which multiple servers wish to compute padding schemes in a way that protects the servers' identity in addition to the identity of the files.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源