Denial of Service or Denial of Security? How Attacks on Reliability can Compromise Anonymity

Channel:
Microsoft Research
Subscribers:
344,000
Published on ● Video Link: https://www.youtube.com/watch?v=y6-5IyZaVoM


Duration: 1:25:45
39 views
1

It is often mistakenly thought that Availability is, as a security property, orthogonal to Confidentiality. Yet in the case of anonymity system, that try to hide the senders and receivers of messages, this is not the case. In this talk we present the effect attackers that disrupt anonymous communications have on the security of traditional mix systems, as well as on the Hydra-Onion and Cashmere systems that aim to offer reliable mixing. We show that denial of service (DoS) lowers anonymity as messages need to get retransmitted to be delivered, uncovering a fundamental limit on the security of all mix systems; Cashmere (a peer-to-peer system) and Hydra-Onion are also badly affected by DoS attackers. We also show that reliable mixing systems may be introducing additional vulnerabilities and illustrate this with two novel attacks. Our results are backed by probabilistic modelling and extensive simulations and are of direct applicability to deployed anonymity systems.



Other Videos By Microsoft Research


2016-09-07Mark-Region and Other Advances in Garbage Collection
2016-09-07The Medea Hypothesis: Is Life on Earth Ultimately Self Destructive?
2016-09-07WaveScope: Stream Programming on Heterogeneous Wireless Devices
2016-09-07Bags of words: the search engine
2016-09-07Intrinsic Robustness of the Price of Anarchy
2016-09-07Reach for A*: an Efficient Point-to-Point Shortest Path Algorithm
2016-09-07ABC-MART: Recent Improvements in Boosting, Trees and Classification Algorithms
2016-09-07Intelligent Fault Notification through Understanding Developer Behavior
2016-09-07Contextual Link Analysis for Web Search
2016-09-07Scheduling Parallel Functional Programs
2016-09-07Denial of Service or Denial of Security? How Attacks on Reliability can Compromise Anonymity
2016-09-07Chemotaxis. Do we understand it all?
2016-09-07Graphical Models and Statistical Mechanics in Communications and Storage Applications
2016-09-07Model Abstraction Methodology for Temporal Behavior Analysis of Multiscale Biological Systems
2016-09-07Active Learning with Model Selection in Linear Regression
2016-09-07Human-Centered Home Network Research at Georgia Tech
2016-09-07Imitating the immune system
2016-09-07The Human Experiment: Two Years and Twenty Minutes Inside Biosphere 2           
2016-09-07Structural Abstraction of Software Verification Conditions
2016-09-07Behavior-Based Malware Detection [1/19]
2016-09-07What the Web Means for Science


Tags:
microsoft research