arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1003.5510cs.CRcs.NI
收藏

EphPub:迈向强大的短暂出版

EphPub: Toward Robust Ephemeral Publishing

Claude Castelluccia, Emiliano De Cristofaro, Aurelien Francillon, Mohamed-Ali Kaafar

摘要:

越来越多的个人和敏感信息通过互联网传播,促使人们对隐私问题的关注与日俱增。数字数据通常会无限期地存在,用户会失去控制权。这激发了将内容可用性限制到由数据所有者设置的到期时间的期望。本文提出并形式化了Ephemeral Publishing(EphPub)的概念,以防止对过期内容的访问。我们提出了一个有效的和强大的协议,建立在域名系统(DNS)及其缓存机制。通过EphPub,敏感内容被加密发布,密钥材料以隐写的方式分发给随机选择的独立解析器。然后,内容的可用性受到DNS缓存条目消失的限制。EphPub协议对现有应用程序是透明的,不依赖于可信硬件、集中式服务器或用户主动操作。我们分析了它的鲁棒性,并表明,它在DNS基础设施上产生的开销可以忽略不计。我们还进行了大规模的900K开放DNS解析器的缓存行为的研究。最后,我们提出Firefox和Thunderbird扩展,提供临时发布功能,以及一个命令行工具来创建临时文件。

英文摘要:

The increasing amount of personal and sensitive information disseminated over the Internet prompts commensurately growing privacy concerns. Digital data often lingers indefinitely and users lose its control. This motivates the desire to restrict content availability to an expiration time set by the data owner. This paper presents and formalizes the notion of Ephemeral Publishing (EphPub), to prevent the access to expired content. We propose an efficient and robust protocol that builds on the Domain Name System (DNS) and its caching mechanism. With EphPub, sensitive content is published encrypted and the key material is distributed, in a steganographic manner, to randomly selected and independent resolvers. The availability of content is then limited by the evanescence of DNS cache entries. The EphPub protocol is transparent to existing applications, and does not rely on trusted hardware, centralized servers, or user proactive actions. We analyze its robustness and show that it incurs a negligible overhead on the DNS infrastructure. We also perform a large-scale study of the caching behavior of 900K open DNS resolvers. Finally, we propose Firefox and Thunderbird extensions that provide ephemeral publishing capabilities, as well as a command-line tool to create ephemeral files.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑