Mobile traffic sensor network versus motion-MIX: tracing and protecting mobile wireless nodes

ABSTRACT

In this paper we focus on passive attacks that threaten the privacy of mobile wireless networks. We define the concept of "venue privacy attack" (VPA) to illustrate the emerging anonymity attacks to trace mobile wireless nodes. Then we propose "motion-MIX" as the countermeasure to defend against various venue privacy attacks. We study the necessary conditions to implement motion-MIXes. These conditions include identity-free routing, one-time packet content and various other concerns in the network protocol stack. Then we use a new asymptotic security model to verify motion-MIX's effectiveness against venue privacy attacks. In a scalable ad hoc network, we prove that the probability of security breach is negligible (aka. sub-polynomial) with respect to the polynomial-bounded network scale (i.e., number of node in the network). This notion is conforming to the existing security notions in computational cryptography, where the polynomial-bounded metric is key length.

REFERENCES

• 1: Giusseppe Ateniese , Amir Herzberg , Hugo Krawczyk , Gene Tsudik, Untraceable mobility or how to travel incognito, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.31 n.9, p.871-884, April 23, 1999
• 2: A. R. Beresford. Location Privacy in Ubiquitous Computing. PhD thesis, University of Cambridge, November 2004.
• 3: Alastair R. Beresford , Frank Stajano, Location Privacy in Pervasive Computing, IEEE Pervasive Computing, v.2 n.1, p.46-55, January 2003 [doi>10.1109/MPRV.2003.1186725 ]
• 4: Alastair R. Beresford , Frank Stajano, Mix Zones: User Privacy in Location-aware Services, Proceedings of the Second IEEE Annual Conference on Pervasive Computing and Communications Workshops, p.127, March 14-17, 2004
• 5: Christian Bettstetter , Hannes Hartenstein , Xavier Pérez-Costa, Stochastic properties of the random waypoint mobility model, Wireless Networks, v.10 n.5, p.555-567, September 2004 [doi>10.1023/B:WINE.0000036458.88990.e5]
• 6: Christian Bettstetter , Christian Wagner, The Spatial Node Distribution of the Random Waypoint Mobility Model, Mobile Ad-Hoc Netzwerke, 1. deutscher Workshop über Mobile Ad-Hoc Netzwerke WMAN 2002, p.41-58, March 25-26, 2002
• 7: Azzedine Boukerche , Khalil El-Khatib , Li Xu , Larry Korba, SDAR: A Secure Distributed Anonymous Routing Protocol for Wireless and Mobile Ad Hoc Networks, Proceedings of the 29th Annual IEEE International Conference on Local Computer Networks (LCN'04), p.618-624, November 16-18, 2004 [doi>10.1109/LCN.2004.109]
• 8: Claude Castelluccia , Pars Mutaf, Shake them up!: a movement-based pairing protocol for CPU-constrained devices, Proceedings of the 3rd international conference on Mobile systems, applications, and services, June 06-08, 2005, Seattle, Washington [doi>10.1145/1067170.1067177]
• 9: David L. Chaum, Untraceable electronic mail, return addresses, and digital pseudonyms, Communications of the ACM, v.24 n.2, p.84-90, Feb. 1981 [doi>10.1145/358549.358563]
• 10: D. Chaum, The dining cryptographers problem: unconditional sender and recipient untraceability, Journal of Cryptology, v.1 n.1, p.65-75, 1988
• 11: N. Cressie. Statistics for Spatial Data. John Wiley and Sons, 1993.
• 12: W. Dai. PipeNet 1.1. http://www.eskimo.com/~weidai/pipenet.txt, 1996.
• 13: Jing Deng , Richard Han , Shivakant Mishra, Intrusion Tolerance and Anti-Traffic Analysis Strategies For Wireless Sensor Networks, Proceedings of the 2004 International Conference on Dependable Systems and Networks (DSN'04), p.637, June 28-July 01, 2004
• 14: C. Díaz, S. Seys, J. Claessens, and B. Preneel. Towards measuring anonymity. In R. Dingledine and P. Syverson, editors, Proceedings of Privacy Enhancing Technologies Workshop (PET 2002), Lecture Notes in Computer Science 2482, pages 54--68, 2002.
• 15: Shlomi Dolev , Rafail Ostrobsky, Xor-trees for efficient anonymous multicast and reception, ACM Transactions on Information and System Security (TISSEC), v.3 n.2, p.63-84, May 2000 [doi>10.1145/354876.354877]
• 16: Kevin Fall, A delay-tolerant network architecture for challenged internets, Proceedings of the 2003 conference on Applications, technologies, architectures, and protocols for computer communications, August 25-29, 2003, Karlsruhe, Germany [doi>10.1145/863955.863960]
• 17: M. Gruteser and D. Grunwald. Anonymous Usage of Location-Based Services Through Spatial and Temporal Cloaking. In MobiSys03, 2003.
• 18: Y.-C. Hu and H. J. Wang. A Framework for Location Privacy in Wireless Networks. In ACM SIGCOMM Asia Workshop, 2005.
• 19: L. Huang, K. Matsuura, H. Yamane, and K. Sezaki. Enhancing Wireless Location Privacy Using Silent Period. In IEEE WCNC, 2005.
• 20: L. Huang, H. Yamane, K. Matsuura, and K. Sezaki. Towards Modeling Wireless Location Privacy. In Workshop on Privacy Enhancing Technologies (PET), 2005.
• 21: P. G. Ifju, S. M. Ettinger, D. Jenkins, Y. Lian, W. Shyy, and M. Waszak. Flexible-wing-based Micro Air Vehicles. In 40th AIAA Aerospace Sciences Meeting, 2002.
• 22: Jiejun Kong , Mario Gerla, Anonymous and untraceable communications in mobile wireless networks, 2004
• 23: J. Kong. Formal Notions of Anonymity for Peer-to-peer Networks. Technical Report Report 2005/132, IACR Cryptology ePrint Archive, May 2005. Also CSD-TR050014, Department of Computer Science, UCLA.
• 24: Jiejun Kong , Shirshanka Das , Edward Tsai , Mario Gerla, ESCORT: a decentralized and localized access control system for mobile wireless access to secured domains, Proceedings of the 2003 ACM workshop on Wireless security, September 19-19, 2003, San Diego, CA, USA [doi>10.1145/941311.941320]
• 25: Jiejun Kong , Xiaoyan Hong, ANODR: anonymous on demand routing with untraceable routes for mobile ad-hoc networks, Proceedings of the 4th ACM international symposium on Mobile ad hoc networking & computing, June 01-03, 2003, Annapolis, Maryland, USA [doi>10.1145/778415.778449]
• 26: Jiejun Kong, Mobility Changes Anonymity: Mobile Ad Hoc Networks Need Efficient Anonymous Routing, Proceedings of the 10th IEEE Symposium on Computers and Communications (ISCC'05), p.57-62, June 27-30, 2005 [doi>10.1109/ISCC.2005.105]
• 27: Celal Ozturk , Yanyong Zhang , Wade Trappe, Source-location privacy in energy-constrained sensor network routing, Proceedings of the 2nd ACM workshop on Security of ad hoc and sensor networks, October 25-25, 2004, Washington DC, USA [doi>10.1145/1029102.1029117]
• 28: Charles E. Perkins , David B. Johnson, Mobility support in IPv6, Proceedings of the 2nd annual international conference on Mobile computing and networking, p.27-37, November 1996, Rye, New York, United States [doi>10.1145/236387.236400]
• 29: C. E. Perkins, E. M. Royer, and S. Das. Ad-hoc On Demand Distance Vector (AODV) Routing. http://www.ietf.org/rfc/rfc3561.txt, July 2003.
• 30: Andreas Pfitzmann , Marit Köhntopp, Anonymity, unobservability, and pseudeonymity — a proposal for terminology, International workshop on Designing privacy enhancing technologies: design issues in anonymity and unobservability, p.1-9, January 2001, Berkeley, California, United States
• 31: Andreas Pfitzmann , Birgit Pfitzmann , Michael Waidner, ISDN-MIXes: Untraceable Communication with Small Bandwidth Overhead, Kommunikation in Verteilten Systemen, Grundlagen, Anwendungen, Betrieb, GI/ITG-Fachtagung, p.451-463, February 20-22, 1991
• 32: A Pfitzmann , M Waidner, Networks without user observability—design options, Proc. of a workshop on the theory and application of cryptographic techniques on Advances in cryptology---EUROCRYPT '85, p.245-253, January 1986, Linz, Austria
• 33: Charles Rackoff , Daniel R. Simon, Cryptographic defense against traffic analysis, Proceedings of the twenty-fifth annual ACM symposium on Theory of computing, p.672-681, May 16-18, 1993, San Diego, California, United States [doi>10.1145/167088.167260]
• 34: M. G. Reed, P. F. Syverson, and D. M. Goldschlag. Anonymous Connections and Onion Routing. IEEE Journal on Selected Areas in Communications, 16(4), 1998.
• 35: Michael K. Reiter , Aviel D. Rubin, Crowds: anonymity for Web transactions, ACM Transactions on Information and System Security (TISSEC), v.1 n.1, p.66-92, Nov. 1998 [doi>10.1145/290163.290168]
• 36: Giovanni Resta , Paolo Santi, An analysis of the node spatial distribution of the random waypoint mobility model for ad hoc networks, Proceedings of the second ACM international workshop on Principles of mobile computing, October 30-31, 2002, Toulouse, France [doi>10.1145/584490.584500]
• 37: Didier Samfat , Refik Molva , N. Asokan, Untraceability in mobile networks, Proceedings of the 1st annual international conference on Mobile computing and networking, p.26-36, November 13-15, 1995, Berkeley, California, United States [doi>10.1145/215530.215548]
• 38: A. Serjantov and G. Danezis. Towards an Information Theoretic Metric for Anonymity. In R. Dingledine and P. Syverson, editors, Proceedings of Privacy Enhancing Technologies Workshop (PET 2002), Lecture Notes in Computer Science 2482, pages 41--53, 2002.
• 39: A. Serjantov and R. E. Newman. On the Anonymity of Timed Pool Mixes. In Workshop on Privacy and Anonymity Issues in Networked and Distributed Systems, pages 427--434, 2003.
• 40: C. E. Shannon. Communication Theory of Secrecy Systems. Bell System Technical Journal, 28(4):656--715, 1949.
• 41: Ronggong Song , Larry Korba , George Yee, AnonDSR: efficient anonymous dynamic source routing for mobile ad-hoc networks, Proceedings of the 3rd ACM workshop on Security of ad hoc and sensor networks, November 07-07, 2005, Alexandria, VA, USA [doi>10.1145/1102219.1102226]
• 42: Latanya Sweeney, k-anonymity: a model for protecting privacy, International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, v.10 n.5, p.557-570, October 2002 [doi>10.1142/S0218488502001648]
• 43: Luis von Ahn , Andrew Bortz , Nicholas J. Hopper, k-anonymous message transmission, Proceedings of the 10th ACM conference on Computer and communications security, October 27-30, 2003, Washington D.C., USA [doi>10.1145/948109.948128]
• 44: M. Wright, M. Adler, B. N. Levine, and C. Shields. An Analysis of the Degradation of Anonymous Protocols. In Network and Distributed Security Symposium - NDSS '02, 2002.
• 45: Shouhuai Xu , Moti Yung, k-anonymous secret handshakes with reusable credentials, Proceedings of the 11th ACM conference on Computer and communications security, October 25-29, 2004, Washington DC, USA [doi>10.1145/1030083.1030105]
• 46: Y. Zhang, W. Liu, and W. Lou. Anonymous Communications in Mobile Ad Hoc Networks. In IEEE INFOCOM, 2005.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

General Terms:
Design, Security

Keywords:
ANODR, anonymity, identity-free routing, mobility, motion-MIX