On pseudonymization of audit data for intrusion detection

DOI10.1007/3-540-44702-4_10MaRDI QIDQ2763274zbMATH OpenFDO

Authors Joachim Biskup, Ulrich Flegel

Publication date 14 January 2002

Published in Lecture Notes in Computer Science (Search for Journal in Brave)

Full work available at URL http://link.springer.de/link/service/series/0558/bibs/2009/20090161

Mathematics Subject Classification ID

Data encryption (aspects in computer science) (68P25) Computing methodologies and applications (68U99)

Review text

In multilaterally secure intrusion detection systems (IDS) anonymity and accountability are potentially conflicting requirements. Since IDS rely on audit data to detect violations of security policy, we can balance above requirements by pseudonymization of audit data, as a form of reversible anonymization. We discuss previous work in this area and underlying trust models. Instead of relying on mechanisms external to the system, or under the control of potential adversaries, in our proposal we technically bind reidentification to a threshold, representing the legal purpose of accountability in the presence of policy violations. Also, we contrast our notion of threshold-based identity recovery with previous approaches and point out open problems. For the entire collection see [Zbl 0976.68578].

Recommendations

• Pseudonym systems. (Extended abstract)
• Intrusion detections in collaborative organizations by preserving privacy
• Towards a theory of intrusion detection
• Using data-independence in the analysis of intrusion detection systems
• Applied Cryptography and Network Security

Cited in

(3)

• Cryptanalysis of a privacy preserving auditing for data integrity protocol from TrustCom 2013
• Intrusion detections in collaborative organizations by preserving privacy
• Cryptology and Network Security

This page was built for publication: On pseudonymization of audit data for intrusion detection

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2763274)