Covert Channels and Simple Timed Mix-Firewalls
Abstract
Traditional methods for evaluating the amount of anonymity afforded by various Mix configurations have depended on either measuring the size of the set of possible senders of a particular message (anonymity set size), or by measuring the entropy associated with the probability distribution of the messages possible senders. This report explores further in detail an alternative way of assessing the anonyinity of a Mix system by considering the capacity of a covert channel from a sender behind the Mix to an observer of the Mix's output. Initial work considered a simple model where an observer (Eve) was restricted to counting the number of messages leaving a Mix configured as a firewall guarding the enclave with one malicious sender (Alice) and some other naive senders (Clueless's). Here, we consider the case where Eve can distinguish between multiple destinations, and the senders can select to which destination their message (if any) is sent each clock tick.
Document Details
- Document Type
- Technical Report
- Publication Date
- Jul 06, 2004
- Accession Number
- ADA426203
Entities
People
- Ira S. Moskowitz
- Richard E. Newman
- Vipan R. Nalla
Organizations
- United States Naval Research Laboratory