FLAIM: A Multi-level Anonymization Framework for Computer and Network Logs

Abstract

FLAIM (Framework for Log Anonymization and Information Management) addresses two important needs not well addressed by current log anonymizers. First, it is extremely modular and not tied to the specific log being anonymized. Second, it supports multi-level anonymization, allowing system administrators to make fine-grained trade-offs between information loss and privacy/security concerns. In this paper, we examine anonymization solutions to date and note the above limitations in each. We further describe how FLAIM addresses these problems, and we describe FLAIM's architecture and features in detail.

16 pages, 4 figures, in submission to USENIX Lisa

Cited by in corpus (5)

• Preserving Both Privacy and Utility in Network Trace Anonymization
• On the Utility of Anonymized Flow Traces for Anomaly Detection
• Mathematical and Statistical Opportunities in Cyber Security
• Reduce to the Max: A Simple Approach for Massive-Scale Privacy-Preserving Collaborative Network Measurements (Extended Version)
• On Generating and Labeling Network Traffic with Realistic, Self-Propagating Malware