E-Book, Englisch, Band 35, 307 Seiten
Flegel Privacy-Respecting Intrusion Detection
1. Auflage 2007
ISBN: 978-0-387-68254-9
Verlag: Springer
Format: PDF
Kopierschutz: 1 - PDF Watermark
E-Book, Englisch, Band 35, 307 Seiten
Reihe: Advances in Information Security
ISBN: 978-0-387-68254-9
Verlag: Springer
Format: PDF
Kopierschutz: 1 - PDF Watermark
Effective response to misuse or abusive activity in IT systems requires the capability to detect and understand improper activity. Intrusion Detection Systems observe IT activity, record these observations in audit data, and analyze the collected audit data to detect misuse. Privacy-Respecting Intrusion Detection introduces the concept of technical purpose binding, which restricts the linkability of pseudonyms in audit data to the amount necessary for misuse detection. Also, it limits the recovery of personal data to pseudonyms involved in a detected misuse scenario. The book includes case studies demonstrating this theory, and solutions that are constructively validated by providing algorithms.
Autoren/Hrsg.
Weitere Infos & Material
1;Contents;6
2;List of Figures;9
3;List of Tables;12
4;Foreword;13
5;Acknowledgements;16
6;Introduction and Background;17
6.1;1 Introduction;18
6.2;2 Authorizations;24
6.3;3 An Architectural Model for Secure Authorizations;28
6.4;4 Traditional Security Objectives;41
6.5;5 Personal Data Protection Objectives;45
6.6;6 The Challenge: Technical Enforcement of Multilateral Security;57
6.7;7 Pseudonyms – A Technical Point of View;61
6.8;8 An Architectural Model for Pseudonymous and Secure Authorizations;69
6.9;9 Comparing Architectures;78
6.10;10 Audit Data Pseudonymization;89
7;Set-based Approach;100
7.1;11 Requirements, Assumptions and Trust Model;101
7.2;12 Modeling Conditions for Technical Purpose Binding of Controlled Pseudonym Disclosure;106
7.3;13 Cryptographic Enforcement of Disclosure Conditions;112
7.4;14 The Mismatch Problem;117
7.5;15 Operational Pseudonymization and Pseudonym Disclosure;122
7.6;16 Extensions;129
8;Application to Unix Audit Data;141
8.1;17 Unix Audit Data;142
8.2;18 Syslog;146
8.3;19 Instantiating the Set-based Approach for Syslog- style Audit Data;151
8.4;20 Implementation: Pseudo/CoRe;163
9;Evaluation;172
9.1;21 APES: Anonymity and Privacy in Electronic Services;173
9.2;22 Evaluating the Design Using Basic Building Blocks for Anonymity;179
9.3;23 Evaluating the Performance of the Implementation;189
10;Refinement of Misuse Scenario Models;198
10.1;24 Motivating Model Refinements;199
10.2;25 Models of Misuse Scenarios;202
10.3;26 Pseudonymization Based on Serial Signature- Nets;228
10.4;27 Pseudonym Linkability;231
10.5;28 Pseudonym Disclosure;244
11;Summary;280
12;A Threshold Schemes for Cryptographic Secret Sharing;282
13;References;284
14;Index;300
