网上举报平台的安全提交系统
A Secure Submission System for Online Whistleblowing Platforms
摘要:
举报人法保护向公众或当局举报政府或公司不当行为的个人。尽管有这些法律,告密者经常冒着报复的风险,维基解密等网站出现,为这些人提供一定程度的匿名性。然而,随着各国提高网络监控和互联网协议数据保留水平,仅仅使用Tor等匿名软件或通过SSL渠道访问举报网站的行为就可能足以导致调查和后果。作为一个替代提交系统,我们提出了一个在线广告网络称为AdLeaks。AdLeaks利用无处不在的未经请求的在线广告,在提交披露时提供完全的发件人不可观察性。AdLeaks广告在浏览器中计算随机函数,并将结果提交给AdLeaks基础设施。这样一个告密者的浏览器用加密的信息替换输出,这样传输就与普通浏览器的传输无法区分。它的后端设计确保AdLeaks必须只处理一小部分产生的流量,以便以高概率接收披露。我们描述了AdLeaks的设计,并通过分析和实验来评估其性能。
英文摘要:
Whistleblower laws protect individuals who inform the public or an authority about governmental or corporate misconduct. Despite these laws, whistleblowers frequently risk reprisals and sites such as WikiLeaks emerged to provide a level of anonymity to these individuals. However, as countries increase their level of network surveillance and Internet protocol data retention, the mere act of using anonymizing software such as Tor, or accessing a whistleblowing website through an SSL channel might be incriminating enough to lead to investigations and repercussions. As an alternative submission system we propose an online advertising network called AdLeaks. AdLeaks leverages the ubiquity of unsolicited online advertising to provide complete sender unobservability when submitting disclosures. AdLeaks ads compute a random function in a browser and submit the outcome to the AdLeaks infrastructure. Such a whistleblower's browser replaces the output with encrypted information so that the transmission is indistinguishable from that of a regular browser. Its back-end design assures that AdLeaks must process only a fraction of the resulting traffic in order to receive disclosures with high probability. We describe the design of AdLeaks and evaluate its performance through analysis and experimentation.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。