Anonymity Protocols as Noisy Channels - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Journal Articles Information and Computation Year : 2008

Anonymity Protocols as Noisy Channels


We consider a framework in which anonymity protocols are interpreted as noisy channels in the information-theoretic sense, and we explore the idea of using the notion of capacity as a measure of the loss of anonymity. Such idea was already suggested by Moskowitz, Newman and Syverson, in their analysis of the covert channel that can be created as a result of non-perfect anonymity. We consider the case in which some leak of information is intended by design, and we introduce the notion of conditional capacity to rule out this factor, thus retrieving a natural correspondence with the notion of anonymity. Furthermore, we show how to compute the capacity and the conditional capacity when the anonymity protocol satisfies certain symmetries. We also investigate how the adversary can test the system to try to infer the user's identity, and we study how his probability of success depends on the characteristics of the channel. We then illustrate how various notions of anonymity can be expressed in this framework, and show the relation with some definitions of probabilistic anonymity in literature. Finally, we show how to compute the matrix of the channel (and hence the capacity and conditional capacity) using model checking.
Fichier principal
Vignette du fichier
full.pdf (354.7 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

inria-00349225 , version 1 (25-12-2008)



Konstantinos Chatzikokolakis, Catuscia Palamidessi, Prakash Panangaden. Anonymity Protocols as Noisy Channels. Information and Computation, 2008, 206 (2-4), pp.378--401. ⟨10.1016/j.ic.2007.07.003⟩. ⟨inria-00349225⟩
226 View
252 Download



Gmail Facebook X LinkedIn More