A P2P based usage control enforcement scheme resilient to re-injection attacks

Leontiadis, Iraklis; Molva, Refik; Önen, Melek
WOWMOM 2014, IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks, 16-19 June 2014, Sydney, Australia

Existing privacy controls based on access control techniques do not prevent massive dissemination of private data by unauthorized users. We suggest a usage control enforcement scheme that allows users to gain control over their data during its entire lifetime. The scheme is based on a peer-to-peer architecture whereby a different set of peers is randomly selected for data assignment. Usage control is achieved based on the assumption that at least t out of any set of n peers will not behave maliciously. Such a system would still suffer from re-injection attacks whereby attackers can gain ownership of data and the usage policy thereof by simply re-storing data after slight modification of the content. In order to cope with re-injection attacks the scheme relies on a similarity detection mechanism. The robustness of the scheme has been evaluated in an experimental setting using a variety of re-injection attacks.

DOI
Type:
Conférence
City:
Sydney
Date:
2014-06-16
Department:
Sécurité numérique
Eurecom Ref:
4259
Copyright:
© 2014 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.

PERMALINK : https://www.eurecom.fr/publication/4259