Privacy-Respecting Intrusion Detection

- Preface

- Introduction and Background

- Introduction

- Authorizations

- An Architectural Model for Secure Authorizations

- Traditional Security Objectives

- Personal Data Protection Objectives

- The Challenge: Technical Enforcement of Multilateral Security

- Pseudonyms - A Technical Point of View

- An Architectural Model for Pseudonymous and Secure Authorizations

- Comparing Architectures and Loosely Related Work

- Audit Data Pseudonymization and Closely Related Work

- Coarse-grained Approach

- Requirements, Assumptions and Trust Model

- Modeling Conditions for Technical Purpose Binding

- Cryptographic Enforcement of Disclosure Conditions

- The Mismatch Problem

- Operational Pseudonymization and Pseudonym Disclosure

- Application to Unix Audit Data

- Unix Audit Data

- Syslog

- Instantiating the Coarse-grained Approach for Syslog-style Audit Data

- Implementation: Pseudo/CoRe

- Evaluation

- APES: Anonymity and Privacy in Electronic Services

- Evaluating the Design Using Basic Building Blocks for Anonymity

- Evaluating the Performance of the Implementation

- Fine-grained Approach

- Motivating Model Refinements

- Models of Misuse Scenarios

- Pseudonymization Based on Serial Signature-Nets

- Pseudonym Linkability

- Pseudonym Disclosure

- Summary

- Bibliography

- A. Threshold Schemes for Cryptographic Secret Sharing

- B. Example Applications of Pseudo/CoRe

- Index