Applying network address encryption to anonymity and preventing data exfiltration

Trostle, Jonathan

doi:10.1109/milcom.2008.4753212

Cited by 5 publications

(14 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In our review, we observed that quite a large number of countermeasures are either not evaluated at all ( [23], [40], [45] , [48] , [49] , [62] , [75] , [88] , [91] , [67] , [92] , [105] , [110], [111], [114], [137], [141], [154], , [160], [174], , [175]) or evaluated weakly ( [60], [70], [100], [109], [132], [138], [147], [158], [161], [165], [171]). We consider an evaluation as weak evaluation when the system is evaluated with a small dataset (e.g.…”

Section: Discussionmentioning

confidence: 99%

See 1 more Smart Citation

Data exfiltration: A review of external attack vectors and countermeasures

Ullah

Edwards

Ramdhany

et al. 2018

Journal of Network and Computer Applications

103

View full text Add to dashboard Cite

Context: One of the main targets of cyber-attacks is data exfiltration, which is the leakage of sensitive or private data to an unauthorized entity. Data exfiltration can be perpetrated by an outsider or an insider of an organization. Given the increasing number of data exfiltration incidents, a large number of data exfiltration countermeasures have been developed. These countermeasures aim to detect, prevent, or investigate exfiltration of sensitive or private data. With the growing interest in data exfiltration, it is important to review data exfiltration attack vectors and countermeasures to support future research in this field. Objective: This paper is aimed at identifying and critically analysing data exfiltration attack vectors and countermeasures for reporting the status of the art and determining gaps for future research. Method: We have followed a structured process for selecting 108 papers from seven publication databases. Thematic analysis method has been applied to analyse the extracted data from the reviewed papers. Results: We have developed a classification of (1) data exfiltration attack vectors used by external attackers and (2) the countermeasures in the face of external attacks. We have mapped the countermeasures to attack vectors. Furthermore, we have explored the applicability of various countermeasures for different states of data (i.e., in use, in transit, or at rest). Conclusion: This review has revealed that (a) most of the state of the art is focussed on preventive and detective countermeasures and significant research is required on developing investigative countermeasures that are equally important; (b) Several data exfiltration countermeasures are not able to respond in real-time, which specifies that research efforts need to be invested to enable them to respond in real-time (c) A number of data exfiltration countermeasures do not take privacy and ethical concerns into consideration, which may become an obstacle in their full adoption (d) Existing research is primarily focussed on protecting data in 'in use' state, therefore, future research needs to be directed towards securing data in 'in rest' and 'in transit' states (e) There is no standard or framework for evaluation of data exfiltration countermeasures. We assert the need for developing such an evaluation framework.

show abstract

Section: Discussionmentioning

confidence: 99%

“…Trostle [88] focuses on preventing data exfiltration from a network. The author takes the example of a malicious process with access to data it wishes to transmit out of a network, which it might attempt via a timing channel, sending packets on a vector where its external collaborator can monitor traffic.…”

Section: Cyber Deceptionmentioning

confidence: 99%

Data exfiltration: A review of external attack vectors and countermeasures

Ullah

Edwards

Ramdhany

et al. 2018

Journal of Network and Computer Applications

103

View full text Add to dashboard Cite

show abstract

“…Jonathan [9] proposed a one-time encrypted Network addresses by considering the two existing security problems are anonymous communications and prevention of ex-filtration of data through network covert channels. It was shown clearly how one-time encrypted addresses can prevent attacks of traffic analysis and intersection that can avoid or prevent low-latency and anonymous communication.…”

Section: Literature Reviewmentioning

confidence: 99%

Stochastic model: reCAPTCHA controller based co-variance matrix analysis on frequency distribution using trust evaluation and re-eval by Aumann agreement theorem against DDoS attack in MANET

Poongodi

Bose

2015

Cluster Comput

View full text Add to dashboard Cite

The DDoS attack is more vulnerable attack in the self structured and infra structure less MANET environment. The bot net based flooding attack is very cheap and easy to implement. Many detection and prevention mechanisms has been proposed to avoid DDoS attack. Here we have proposed the stochastic model of covariance matrix analysis in which the entropy difference has been computed by the frequency distribution of rule metrics against the threshold entropy periodically which in turn difference is highest can be controlled by reCAPTCHA controller to defend against DDoS attack. The prevention mechanism by trust evaluation using clustering methodology used to identify the attacker and reduce the cost of detection mechanism. The Aumann agreement theorem based trust re-evaluation is also proposed in order to reduce the false positive and negative probabilities, such that the accuracy of the system is enhanced. Finally the nodes identified as attacker by their trust values will be evicted and rekeying has been done. The experimental analysis in NS2 with CAIDA dataset shows true positive rate and detection rate is high in the proposed mechanism.

show abstract

“…There have been attempts to enhance the anti-scanning feature of the IP addresses, mainly by: 1) generating addresses that is semantically opaque and more random [22], 2) using temporal [23,24] or hopping [25][26][27][28][29][30] addresses with short lifetime, and further 3) using a unique address for each connection [31][32][33][34][35] or even packet [36,37].…”

Section: Introductionmentioning

confidence: 99%

“…Previous work [35][36][37] propose to encrypt host identity into pseudo-random temporal addresses, so that the host identity is hidden from the outside network. But it has to be done on local routers, otherwise routing will fail.…”

Section: Introductionmentioning

confidence: 99%

Addressless: A new internet server model to prevent network scanning

et al. 2021

View full text Add to dashboard Cite

Eliminating unnecessary exposure is a principle of server security. The huge IPv6 address space enhances security by making scanning infeasible, however, with recent advances of IPv6 scanning technologies, network scanning is again threatening server security. In this paper, we propose a new model named addressless server, which separates the server into an entrance module and a main service module, and assigns an IPv6 prefix instead of an IPv6 address to the main service module. The entrance module generates a legitimate IPv6 address under this prefix by encrypting the client address, so that the client can access the main server on a destination address that is different in each connection. In this way, the model provides isolation to the main server, prevents network scanning, and minimizes exposure. Moreover it provides a novel framework that supports flexible load balancing, high-availability, and other desirable features. The model is simple and does not require any modification to the client or the network. We implement a prototype and experiments show that our model can prevent the main server from being scanned at a slight performance cost.

show abstract

Applying network address encryption to anonymity and preventing data exfiltration

Cited by 5 publications

References 7 publications

Data exfiltration: A review of external attack vectors and countermeasures

Data exfiltration: A review of external attack vectors and countermeasures

Stochastic model: reCAPTCHA controller based co-variance matrix analysis on frequency distribution using trust evaluation and re-eval by Aumann agreement theorem against DDoS attack in MANET

Addressless: A new internet server model to prevent network scanning

Contact Info

Product

Resources

About