E-Locus - Institutional Repository of the University of Crete - Network flow contracts : lightweight and practical accountability for the internet

Home Network flow contracts : lightweight and practical accountability for the internet

Results - Details

[Add to Basket]

Identifier

000386823

Title

Network flow contracts : lightweight and practical accountability for the internet

Alternative Title

Συμβόλαιο ροής δικτύου: ελαφριά και πρακτική λογοδοσία για το διαδίκτυο

Author

Ντρίτσος, Νίκος

Thesis advisor

Μαρκάτος, Ευάγγελος

Reviewer

Τραγανίτης, Απόστολος
Παπαδοπούλη, Μαρία

Abstract

Modern network-forensics tools can trace an attacker based on digital evidence, such as network logs or disk activity. These tools are designed to collect information that can tie criminals to their malicious actions. There are analogous procedures based on evidence, such as DNA or fingerprints, in the physical world. Unfortunately, such evidence can be fabricated for incriminating innocent victims. In the digital world data fabrication is even easier. Network-forensics tools can be intentionally deceived by planting fake digital traces in network logs. The result of such actions can be severe. Innocent users can be accused for taking part in offensive activities - for example, for having visited web sites with pedophiliac content. In this thesis, we introduce Network Flow Contracts (NFCs), a framework that allows users accounting for their network activity by verifying all traces they leave in the last-mile ISP. The framework guarantees that only verified actions can be attributed as authentic. NFCs cryptographically sign every network flow initiating by the requesting user. An ISP providing logs as evidence of a particular user accessing a resource must also provide the cryptographic signature of a network flow initiating from the user to the resource. Generating a fake signature is considered computationally hard, as long as the private key of the user is kept secret. Finally, NFCs are easy to deploy and fast. They introduce zero network lag to the clients and an overhead to the ISP, which can be easily accommodated with todays commodity hardware.

Language

English, Greek

Subject

Click

Flow signature

NFCS

Router

Δρομολογητής

Ροή

Ψηφιακή υπογραφή

Issue date

2014-07-25