Structure Preserving Anonymization of Router Configuration Data
MetadataShow full item record
A repository of router configuration files from production networks would provide the research community with a treasure trove of data about network topologies, routing designs, and security policies. However, configuration files have been largely unobtainable precisely because they provide detailed information that could be exploited by competitors and attackers. This paper describes a method for anonymizing router configuration files by removing all information that connects the data to the identity of the underlying network, while still preserving the structure of information that makes the data valuable to networking researchers. Anonymizing configuration files has unusual requirements, including preserving relationships between elements of data, anonymizing regular expressions, and robustly coping with more than 200 versions of the configuration language. Conventional tools and techniques are poorly suited to the problem. Our anonymization method has been validated with a major carrier, earning unprivileged researchers access to the configuration files of thousands of routers in hundreds of networks. Through example analysis, we demonstrate that the anonymized data retains the key properties of the network design. The paper sets out techniques that could be used in an attempt to break the anonymization, and it concludes our anonymization techniques are most applicable to enterprise networks, because the large number of enterprises and the difficulty of probing them from the outside make it hard to recognize an anonymized network based solely on publicly-available information about its topology or configuration. When applied to backbone networks, which are few in number and many of whose properties can be publicly measured, the anonymization might be broken by fingerprinting techniques described in this paper.
IEEE Journal on Selected Areas in Communications, vol. 27, num. 3, pp. 349-358, April 2009.The article of record as published may be found at http://dx.doi.org/10.1145/1028788.1028819
Showing items related by title, author, creator and subject.
An analysis of operational employment for the SH-60B Light Airborne Multi-Purpose System Mk III helicopter|xKenneth L. C. Unger. Unger, Kenneth L. C. (Monterey, California. Naval Postgraduate School, 1995-06);The SH-60B Light Airborne Multi-Purpose Systems (LAMPS) Mk III helicopter is currently employed with few or no weapon systems which preclude it from being a multi-mission capable weapon platform in a littoral warfare ...
The development of a configuration management approach for the operational phase of NATO SEASPARROW project Genet, Richard Paul; Leonard, Brian Robert (1972-06);This Thesis develops a configuration management approach for use during the operational phase of the NATO SEASPARROW Surface Missile System project. A brief description of the concepts and techniques of configuration ...
Niewoehner, Robert Jay (Monterey, California. Naval Postgraduate School, 1994-06);This report presents results of a three phase effort to demonstrate the use of convex control design techniques in aeronautical applications. The first phase was the demonstration of a methodology by which classical aircraft ...