Crowds

Subscribe (Full Service)


	Search: The ACM Digital Library The Guide

	Feedback

Crowds: anonymity for Web transactions

Full text

Pdf (2.45 MB)

Source

ACM Transactions on Information and System Security (TISSEC) archive
Volume 1 , Issue 1 (November 1998) table of contents

Pages: 66 - 92

Year of Publication: 1998

ISSN:1094-9224

Authors

Michael K. Reiter	Bell Labs; and Lucent Technologies
Aviel D. Rubin	AT&T Labs

Publisher

ACM New York, NY, USA

Bibliometrics

Downloads (6 Weeks): 12, Downloads (12 Months): 211, Citation Count: 160

Additional Information:

abstract references cited by index terms review collaborative colleagues

Tools and Actions:	Request Permissions Review this Article Save this Article to a Binder Display Formats: BibTeX EndNote ACM Ref

DOI Bookmark:	Use this link to bookmark this Article: http://doi.acm.org/10.1145/290163.290168 What is a DOI?

ABSTRACT

In this paper we introduce a system called Crowds for protecting users' anonymity on the world-wide-web. Crowds, named for the notion of “blending into a crowd,” operates by grouping users into a large and geographically diverse group (crowd) that collectively issues requests on behalf of its members. Web servers are unable to learn the true source of a request because it is equally likely to have originated from any member of the crowd, and even collaborating crowd members cannot distinguish the originator of a request from a member who is merely forwarding the request on behalf of another. We describe the design, implementation, security, performance, and scalability of our system. Our security analysis introduces degrees of anonymity as an important tool for describing and proving anonymity properties.

REFERENCES

Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.

	1	BRIER, S. 1997. How to keep your privacy: Battle lines get clearer. New York Times (Jan. 13).
	2	David L. Chaum, Untraceable electronic mail, return addresses, and digital pseudonyms, Communications of the ACM, v.24 n.2, p.84-90, Feb. 1981 [doi>10.1145/358549.358563]
	3	CRISTIAN, F. 1991. Reaching agreement on processor group membership in synchronous distributed systems. Distrib. Comput. 4, 175-187.
	4	DESWARTE, Y., BLAIN, L., AND FABRE, J. 1991. Intrusion tolerance in distributed computing systems. In Proceedings of the 1991 IEEE Symposium on Research on Security and Privacy. IEEE Computer Society Press, Los Alamitos, CA, 110-121.
	5	DIFFIE, W. AND HELLMAN, M. E. 1976. New directions in cryptography. IEEE Trans. Inf. Theor. 22, 6.
	6	Eran Gabber , Phillip B. Gibbons , Yossi Matias , Alain J. Mayer, How to Make Personalized Web Browising Simple, Secure, and Anonymous, Proceedings of the First International Conference on Financial Cryptography, p.17-32, February 24-28, 1997
	7	Simson Garfinkel , Gene Spafford, Web Security, Privacy and Commerce, O'Reilly & Associates, Inc., Sebastopol, CA, 2001
	8	GONG, L. 1993. Increasing availability and security of an authentication service. IEEE J. Sel. Areas Commun. 5, 11 (June), 657-662.
	9	Ceki Gulcu , Gene Tsudik, Mixing Email with Babel, Proceedings of the 1996 Symposium on Network and Distributed System Security (SNDSS '96), p.2, February 22-23, 1996
	10	MILLER, L. 1997. No solitude in cyberspace. USA Today (June 9).
	11	MOSER, L. E., MELLIAR-SMITH, P. M., AND AGRAWALA, V. 1991. Membership algorithms for asynchronous distributed systems. In Proceedings of the 11th IEEE International Conference on Distributed Computing Systems (Arlington, TX, May). IEEE Computer Society Press, Los Alamitos, CA, 480-488.
	12	Rajeev Motwani , Prabhakar Raghavan, Randomized algorithms, Cambridge University Press, New York, NY, 1995
	13	Birgit Pfitzmann , Andreas Pfizmann, How to break the direct RSA-implementation of mixes, Proceedings of the workshop on the theory and application of cryptographic techniques on Advances in cryptology, p.373-381, November 1990, Houthalen, Belgium
	14	Andreas Pfitzmann , Birgit Pfitzmann , Michael Waidner, ISDN-MIXes: Untraceable Communication with Small Bandwidth Overhead, Kommunikation in Verteilten Systemen, Grundlagen, Anwendungen, Betrieb, GI/ITG-Fachtagung, p.451-463, February 20-22, 1991
	15	A Pfitzmann , M Waidner, Networks without user observability, Computers and Security, v.6 n.2, p.158-166, April 1987 [doi>10.1016/0167-4048(87)90087-3]
	16	Michael Reiter, Distributing trust with the Rampart toolkit, Communications of the ACM, v.39 n.4, p.71-74, April 1996 [doi>10.1145/227210.227228]
	17	Michael K. Reiter, A Secure Group Membership Protocol, IEEE Transactions on Software Engineering, v.22 n.1, p.31-42, January 1996 [doi>10.1109/32.481515]
	18	Michael K. Reiter , Kenneth P. Birman , Robbert van Renesse, A security architecture for fault-tolerant systems, ACM Transactions on Computer Systems (TOCS), v.12 n.4, p.340-371, Nov. 1994 [doi>10.1145/195792.195823]
	19	Aleta M. Ricciardi , Kenneth P. Birman, Using process groups to implement failure detection in asynchronous environments, Proceedings of the tenth annual ACM symposium on Principles of distributed computing, p.341-353, August 19-21, 1991, Montreal, Quebec, Canada [doi>10.1145/112600.112628]
	20	Richard D. Schlichting , Fred B. Schneider, Fail-stop processors: an approach to designing fault-tolerant computing systems, ACM Transactions on Computer Systems (TOCS), v.1 n.3, p.222-238, August 1983 [doi>10.1145/357369.357371]
	21	Paul F. Syverson , David M. Goldschlag , Michael G. Reed, Anonymous Connections and Onion Routing, Proceedings of the 1997 IEEE Symposium on Security and Privacy, p.44, May 04-07, 1997

CITED BY 161

	Stuart G. Stubblebine , Paul F. Syverson , David M. Goldschlag, Unlinkable serial transactions: protocols and applications, ACM Transactions on Information and System Security (TISSEC), v.2 n.4, p.354-389, Nov. 1999
	Yuval Elovici , Bracha Shapira , Adlai Maschiach, A new privacy model for hiding group interests while accessing the Web, Proceedings of the 2002 ACM workshop on Privacy in the Electronic Society, p.63-70, November 21-21, 2002, Washington, DC
	Claudia Eckert , Alexander Pircher, Internet anonymity: problems and solutions, Proceedings of the 16th international conference on Information security: Trusted information: the new decade challenge, June 11-13, 2001, Paris, France
	Michael K. Reiter , Aviel D. Rubin, Anonymous Web transactions with Crowds, Communications of the ACM, v.42 n.2, p.32-48, Feb. 1999
	Marc Waldman , Aviel D. Rubin , Lorrie Faith Cranor, The architecture of robust publishing systems, ACM Transactions on Internet Technology (TOIT), v.1 n.2, p.199-230, November 2001
	Pino Persiano , Ivan Visconti, User privacy issues regarding certificates and the TLS protocol: the design and implementation of the SPSL protocol, Proceedings of the 7th ACM conference on Computer and communications security, p.53-62, November 01-04, 2000, Athens, Greece
	Alfred Kobsa , Jörg Schreck, Privacy through pseudonymity in user-adaptive systems, ACM Transactions on Internet Technology (TOIT), v.3 n.2, p.149-183, May 2003
	Eran Gabber , Phillip B. Gibbons , David M. Kristol , Yossi Matias , Alain Mayer, On secure and pseudonymous client-relationships with multiple servers, ACM Transactions on Information and System Security (TISSEC), v.2 n.4, p.390-415, Nov. 1999
	Robert Morris , John Jannotti , Frans Kaashoek , Jinyang Li , Douglas Decouto, CarNet: a scalable ad hoc wireless network system, Proceedings of the 9th workshop on ACM SIGOPS European workshop: beyond the PC: new challenges for the operating system, September 17-20, 2000, Kolding, Denmark
	Eran Gabber , Phillip B. Gibbons , David M. Kristol , Yossi Matias , Alain Mayer, Consistent, yet anonymous, Web access with LPWA, Communications of the ACM, v.42 n.2, p.42-47, Feb. 1999
	Frank Dabek , M. Frans Kaashoek , David Karger , Robert Morris , Ion Stoica, Wide-area cooperative storage with CFS, ACM SIGOPS Operating Systems Review, v.35 n.5, Dec. 2001
	Clay Shields , Brian Neil Levine, A protocol for anonymous communication over the Internet, Proceedings of the 7th ACM conference on Computer and communications security, p.33-42, November 01-04, 2000, Athens, Greece
	Jon Crowcroft , Ian Pratt, Peer to peer: peering into the future, Advanced lectures on networking, Springer-Verlag New York, Inc., New York, NY, 2002
	Bruno Gusmão Rocha , Virgílio A. F. Almeida , Lucila Ishitani , Wagner Meira, Jr., Disclosing users' data in an environment that preserves privacy, Proceedings of the 2002 ACM workshop on Privacy in the Electronic Society, p.71-80, November 21-21, 2002, Washington, DC
	Edward W. Felten , Michael A. Schneider, Timing attacks on Web privacy, Proceedings of the 7th ACM conference on Computer and communications security, p.25-32, November 01-04, 2000, Athens, Greece
	Robert M. Arlein , Ben Jai , Markus Jakobsson , Fabian Monrose , Michael K. Reiter, Privacy-preserving global customization, Proceedings of the 2nd ACM conference on Electronic commerce, p.176-184, October 17-20, 2000, Minneapolis, Minnesota, United States
	Jan Camenisch , Els Van Herreweghen, Design and implementation of the idemix anonymous credential system, Proceedings of the 9th ACM conference on Computer and communications security, November 18-22, 2002, Washington, DC, USA
	Brian Neil Levine , Clay Shields, Hordes: a multicast based protocol for anonymity, Journal of Computer Security, v.10 n.3, p.213-240, 2002
	Luis von Ahn , Andrew Bortz , Nicholas J. Hopper, k-anonymous message transmission, Proceedings of the 10th ACM conference on Computer and communications security, October 27-30, 2003, Washington D.C., USA
	Michael J. Freedman , Robert Morris, Tarzan: a peer-to-peer anonymizing network layer, Proceedings of the 9th ACM conference on Computer and communications security, November 18-22, 2002, Washington, DC, USA
	Simon Byers , Aviel D. Rubin , David Kormann, Defending against an Internet-based attack on the physical world, Proceedings of the 2002 ACM workshop on Privacy in the Electronic Society, p.11-18, November 21-21, 2002, Washington, DC
	Marc Rennhard , Bernhard Plattner, Introducing MorphMix: peer-to-peer based anonymous Internet usage with collusion detection, Proceedings of the 2002 ACM workshop on Privacy in the Electronic Society, p.91-102, November 21-21, 2002, Washington, DC
	Jan Camenisch , abhi shelat , Dieter Sommer , Simone Fischer-Hübner , Marit Hansen , Henry Krasemann , Gérard Lacoste , Ronald Leenes , Jimmy Tseng, Privacy and identity management for everyone, Proceedings of the 2005 workshop on Digital identity management, November 11-11, 2005, Fairfax, VA, USA
	Csilla Farkas , Gábor Ziegler , Attila Meretei , András Lörincz, Anonymity and accountability in self-organizing electronic communities, Proceedings of the 2002 ACM workshop on Privacy in the Electronic Society, p.81-90, November 21-21, 2002, Washington, DC
	Vanja Seničar , Borka Jerman-Blažič , Tomaž Klobučar, Privacy-enhancing technologies: approaches and development, Computer Standards & Interfaces, v.25 n.2, p.147-158, May 2003
	Marco Gruteser , Dirk Grunwald, Enhancing location privacy in wireless LAN through disposable interface identifiers: a quantitative analysis, Proceedings of the 1st ACM international workshop on Wireless mobile applications and services on WLAN hotspots, September 19-19, 2003, San Diego, CA, USA
	Lucila Ishitani , Virgilio Almeida , Wagner Meira Jr., Masks: Bringing Anonymity and Personalization Together, IEEE Security and Privacy, v.1 n.3, p.18-23, May 2003
	Brent R. Waters , Edward W. Felten , Amit Sahai, Receiver anonymity via incomparable public keys, Proceedings of the 10th ACM conference on Computer and communications security, October 27-30, 2003, Washington D.C., USA
	Pino Persiano , Ivan Visconti, A secure and private system for subscription-based remote services, ACM Transactions on Information and System Security (TISSEC), v.6 n.4, p.472-500, November 2003
	Hongfei Sui , Jianxin Wang , Jianer Chen , Songqiao Chen, The cost of becoming anonymous: on the participant payload in crowds, Information Processing Letters, v.90 n.2, p.81-86, 30 April 2004
	Richard Au , Harikrishna Vasanta , Kim-Kwang Raymond Choo , Mark Looi, A user-centric anonymous authorisation framework in e-commerce environment, Proceedings of the 6th international conference on Electronic commerce, October 25-27, 2004, Delft, The Netherlands
	Vitaly Shmatikov , Ming-Hsiu Wang, Measuring relationship anonymity in mix networks, Proceedings of the 5th ACM workshop on Privacy in electronic society, October 30-30, 2006, Alexandria, Virginia, USA
	Ira S. Moskowitz , Richard E. Newman , Daniel P. Crepeau , Allen R. Miller, Covert channels and anonymizing networks, Proceedings of the 2003 ACM workshop on Privacy in the electronic society, October 30, 2003, Washington, DC
	Murat Kantarcioglu , Chris Clifton, Privacy-Preserving Distributed Mining of Association Rules on Horizontally Partitioned Data, IEEE Transactions on Knowledge and Data Engineering, v.16 n.9, p.1026-1037, September 2004
	D. Critchlow , N. Zhang, Security enhanced accountable anonymous PKI certificates for mobile e-commerce, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.45 n.4, p.483-503, 15 July 2004
	Neil Daswani , Hector Garcia-Molina, Pong-cache poisoning in GUESS, Proceedings of the 11th ACM conference on Computer and communications security, October 25-29, 2004, Washington DC, USA
	Azzedine Boukerche , Khalil El-Khatib , Li Xu , Larry Korba, A novel solution for achieving anonymity in wireless ad hoc networks, Proceedings of the 1st ACM international workshop on Performance evaluation of wireless ad hoc, sensor, and ubiquitous networks, October 04-04, 2004, Venezia, Italy
	Stefan Köpsell , Ulf Hillig, How to achieve blocking resistance for existing systems enabling anonymous web surfing, Proceedings of the 2004 ACM workshop on Privacy in the electronic society, October 28-28, 2004, Washington DC, USA
	Matthew K. Wright , Micah Adler , Brian Neil Levine , Clay Shields, The predecessor attack: An analysis of a threat to anonymous communications systems, ACM Transactions on Information and System Security (TISSEC), v.7 n.4, p.489-522, November 2004
	Rhys Smith , Jianhua Shao, Preserving privacy when preference searching in e-commerce, Proceedings of the 2003 ACM workshop on Privacy in the electronic society, October 30, 2003, Washington, DC
	A. De Santis , B. Masucci, Anonymous Membership Broadcast Schemes, Designs, Codes and Cryptography, v.32 n.1-3, p.135-151, May-July 2004
	Aviel D. Rubin , Daniel E. Geer Jr., A Survey of Web Security, Computer, v.31 n.9, p.34-41, September 1998
	Matthias Bauer, New covert channels in HTTP: adding unwitting Web browsers to anonymity sets, Proceedings of the 2003 ACM workshop on Privacy in the electronic society, October 30, 2003, Washington, DC
	Florian P. Buchholz , Clay Shields, Providing process origin information to aid in computer forensic investigations, Journal of Computer Security, v.12 n.5, p.753-776, September 2004
	Xiaoxin Wu , Bharat Bhargava, AO2P: Ad Hoc On-Demand Position-Based Private Routing Protocol, IEEE Transactions on Mobile Computing, v.4 n.4, p.335-348, July 2005
	Zhiqiang Yang , Sheng Zhong , Rebecca N. Wright, Anonymity-preserving data collection, Proceeding of the eleventh ACM SIGKDD international conference on Knowledge discovery in data mining, August 21-24, 2005, Chicago, Illinois, USA
	Rajan M. Lukose , Eytan Adar , Joshua R. Tyler , Caesar Sengupta, SHOCK: communicating with computational messages and automatic private profiles, Proceedings of the 12th international conference on World Wide Web, May 20-24, 2003, Budapest, Hungary
	Feng Bao , Robert H. Deng, Protocols that hide user's preferences in electronic transactions, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.48 n.4, p.503-515, 15 July 2005
	Jiejun Kong , Dapeng Wu , Xiaoyan Hong , Mario Gerla, Mobile traffic sensor network versus motion-MIX: tracing and protecting mobile wireless nodes, Proceedings of the 3rd ACM workshop on Security of ad hoc and sensor networks, November 07-07, 2005, Alexandria, VA, USA
	Simon Byers , Aviel D. Rubin , David Kormann, Defending against an Internet-based attack on the physical world, ACM Transactions on Internet Technology (TOIT), v.4 n.3, p.239-254, August 2004
	Huseyin Polat , Wenliang Du, SVD-based collaborative filtering with privacy, Proceedings of the 2005 ACM symposium on Applied computing, March 13-17, 2005, Santa Fe, New Mexico
	Alfredo Milani , Silvia Suriani , Stefano Marcugini, Evolutionary online services, Proceedings of the 7th international conference on Electronic commerce, August 15-17, 2005, Xi'an, China
	Byung Ryong Kim , Ki Chang Kim , Yoo Sung Kim, Securing anonymity in P2P network, Proceedings of the 2005 joint conference on Smart objects and ambient intelligence: innovative context-aware services: usages and technologies, October 12-14, 2005, Grenoble, France
	Qiang Huang , David Jao , Helen J. Wang, Applications of secure electronic voting to automated privacy-preserving troubleshooting, Proceedings of the 12th ACM conference on Computer and communications security, November 07-11, 2005, Alexandria, VA, USA
	Flavio D. Garcia , Ichiro Hasuo , Wolter Pieters , Peter van Rossum, Provable anonymity, Proceedings of the 2005 ACM workshop on Formal methods in security engineering, November 11-11, 2005, Fairfax, VA, USA
	Anna M. Shubina , Sean W. Smith, Using caching for browsing anonymity, ACM SIGecom Exchanges, v.4 n.2, p.11-20, June, 2003
	John Linn, Technology and Web User Data Privacy: A Survey of Risks and Countermeasures, IEEE Security and Privacy, v.3 n.1, p.52-58, January 2005
	Stephan Olariu , Mohamed Eltoweissy , Mohamed Younis, ANSWER: autonomous wireless sensor network, Proceedings of the 1st ACM international workshop on Quality of service & security in wireless and mobile networks, October 13-13, 2005, Montreal, Quebec, Canada
	Sergio Marti , Hector Garcia-Molina, Taxonomy of trust: categorizing P2P reputation systems, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.50 n.4, p.472-484, 15 March 2006
	Igor Margasiński , Krzysztof Szczypiorski, VAST: versatile anonymous system for web users, Enhanced methods in computer security, biometric and artificial intelligence systems, Springer-Verlag, London, 2005
	Heiko Tillwick , Martin Olivier, Towards a framework for connection anonymity, Proceedings of the 2005 annual research conference of the South African institute of computer scientists and information technologists on IT research in developing countries, p.113-122, September 20-22, 2005, White River, South Africa
	Rob Sherwood , Bobby Bhattacharjee , Aravind Srinivasan, P⁵: a protocol for scalable anonymous communication, Journal of Computer Security, v.13 n.6, p.839-876, December 2005
	Joseph Y. Halpern , Kevin R. O'Neill, Anonymity and information hiding in multiagent systems, Journal of Computer Security, v.13 n.3, p.483-514, May 2005
	Marco Gruteser , Dirk Grunwald, Enhancing location privacy in wireless LAN through disposable interface identifiers: a quantitative analysis, Mobile Networks and Applications, v.10 n.3, p.315-325, June 2005
	Frances Brazier , Anja Oskamp , Corien Prins , Maurice Schellekens , Niek Wijngaards, Anonymity and software agents: an interdisciplinary challenge, Artificial Intelligence and Law, v.12 n.1, p.137-157, January 2004
	Vicente Benjumea , Javier Lopez , Jose M. Troya, Specification of a framework for the anonymous use of privileges, Telematics and Informatics, v.23 n.3, p.179-195, August 2006
	Vitaly Shmatikov, Probabilistic analysis of an anonymity system, Journal of Computer Security, v.12 n.3,4, p.355-377, May 2004
	Eric Cronin , Micah Sherr , Matt Blaze, On the (un)reliability of eavesdropping, International Journal of Security and Networks, v.3 n.2, p.103-113, February 2008
	Leonardo A. Martucci , Markulf Kohlweiss , Christer Andersson , Andriy Panchenko, Self-certified Sybil-free pseudonyms, Proceedings of the first ACM conference on Wireless network security, March 31-April 02, 2008, Alexandria, VA, USA
	Micah Sherr , Boon Thau Loo , Matt Blaze, Towards application-aware anonymous routing, Proceedings of the 2nd USENIX workshop on Hot topics in security, p.1-5, August 07, 2007, Boston, MA
	Neelesh Bansod , Ashish Malgi , Byung K. Choi , Jean Mayo, MuON: Epidemic based mutual anonymity in unstructured P2P networks, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.52 n.5, p.915-934, April, 2008
	Marc Rennhard , Sandro Rafaeli , Laurent Mathy , Bernhard Plattner , David Hutchison, Towards Pseudonymous e-Commerce, Electronic Commerce Research, v.4 n.1-2, p.83-111, January-April 2004
	Panagiota Fatourou , Faith Ellen Fich , Eric Ruppert, Time-space tradeoffs for implementations of snapshots, Proceedings of the thirty-eighth annual ACM symposium on Theory of computing, May 21-23, 2006, Seattle, WA, USA
	Emin Gün Sirer , Sharad Goel , Mark Robson , Doǧan Engin, Eluding carnivores: file sharing with strong anonymity, Proceedings of the 11th workshop on ACM SIGOPS European workshop: beyond the PC, September 19-22, 2004, Leuven, Belgium
	Bo Zhu , Sanjeev Setia , Sushil Jajodia, Providing witness anonymity in peer-to-peer systems, Proceedings of the 13th ACM conference on Computer and communications security, October 30-November 03, 2006, Alexandria, Virginia, USA
	Xiaoxin Wu , Ninghui Li, Achieving privacy in mesh networks, Proceedings of the fourth ACM workshop on Security of ad hoc and sensor networks, October 30-30, 2006, Alexandria, Virginia, USA
	Mikko T. Siponen , Harri Oinas-Kukkonen, A review of information security issues and respective research contributions, ACM SIGMIS Database, v.38 n.1, February 2007
	Rohit Gupta , Souvik Ray , Arun K. Somani , Zhao Zhang, Utilizing node's selfishness for providing complete anonymity in peer-to-peer based grids, Multiagent and Grid Systems, v.2 n.1, p.11-27, January 2006
	Arjun Nambiar , Matthew Wright, Salsa: a structured approach to large-scale anonymity, Proceedings of the 13th ACM conference on Computer and communications security, October 30-November 03, 2006, Alexandria, Virginia, USA
	Daniel J. T. Chong , Robert H. Deng, Privacy-enhanced superdistribution of layered content with trusted access control, Proceedings of the ACM workshop on Digital rights management, October 30-30, 2006, Alexandria, Virginia, USA
	Konstantinos Chatzikokolakis , Catuscia Palamidessi, Probable innocence revisited, Theoretical Computer Science, v.367 n.1, p.123-138, 24 November 2006
	Azzedine Boukerche , Khalil El-Khatib , Li Xu , Larry Korba, Performance evaluation of an anonymity providing protocol for wireless ad hoc networks, Performance Evaluation, v.63 n.11, p.1094-1109, November 2006
	Pan Wang , Peng Ning , Douglas S. Reeves, A k-anonymous communication protocol for overlay networks, Proceedings of the 2nd ACM symposium on Information, computer and communications security, March 20-22, 2007, Singapore
	Robson Eduardo De Grande , Sérgio Donizetti Zorzo, Privacy protection without impairing personalization by using the extended system MASKS and the extended contextualized P3P privacy policies, Proceedings of the 12th Brazilian symposium on Multimedia and the web, November 19-22, 2006, Natal, Rio Grande do Norte, Brazil
	Li Xiao , Yunhao Liu , Wenjun Gu , Dong Xuan , Xiaomei Liu, Mutual anonymous overlay multicast, Journal of Parallel and Distributed Computing, v.66 n.9, p.1205-1216, September 2006
	Patrick Lincoln , Phillip Porras , Vitally Shmatikov, Privacy-preserving sharing and correction of security alerts, Proceedings of the 13th conference on USENIX Security Symposium, p.17-17, August 09-13, 2004, San Diego, CA
	Li Zhuang , Feng Zhou , Ben Y. Zhao , Antony Rowstron, Cashmere: resilient anonymous routing, Proceedings of the 2nd conference on Symposium on Networked Systems Design & Implementation, p.301-314, May 02-04, 2005
	Marc Waldman , Aviel D. Rubin , Lorrie Faith Cranor, Publius: a robust, tamper-evident, censorship-resistant web publishing system, Proceedings of the 9th conference on USENIX Security Symposium, p.5-5, August 14-17, 2000, Denver, Colorado
	Roger Dingledine , Nick Mathewson , Paul Syverson, Tor: the second-generation onion router, Proceedings of the 13th conference on USENIX Security Symposium, p.21-21, August 09-13, 2004, San Diego, CA
	David Martin , Andrew Schulman, Deanonymizing Users of the SafeWeb Anonymizing Service, Proceedings of the 11th USENIX Security Symposium, p.123-137, August 05-09, 2002
	Nick Feamster , Magdalena Balazinska , Greg Harfst , Hari Balakrishnan , David Karger, Infranet: Circumventing Web Censorship and Surveillance, Proceedings of the 11th USENIX Security Symposium, p.247-262, August 05-09, 2002
	Mafruz Zaman Ashrafi , See Kiong Ng, Collusion-resistant anonymous data collection method, Proceedings of the 15th ACM SIGKDD international conference on Knowledge discovery and data mining, June 28-July 01, 2009, Paris, France
	Chin-Chen Chang , Chih-Yang Lin , Keng-Chu Lin, Simple efficient mutual anonymity protocols for peer-to-peer network based on primitive roots, Journal of Network and Computer Applications, v.30 n.2, p.662-676, April, 2007
	S. Mauw , J. Verschuren , E. P. de Vink, Data Anonymity in the FOO Voting Scheme, Electronic Notes in Theoretical Computer Science (ENTCS), 168, p.5-28, February, 2007
	Daniel Bleichenbacher , Eran Gabber , Phillip B. Gibbons , Yossi Matias , Alain Mayer, On secure and pseudonymous client-relationships with multiple servers, Proceedings of the 3rd conference on USENIX Workshop on Electronic Commerce, p.9-9, August 31-September 03, 1998, Boston, Massachusetts
	Michael K. Reiter , Vinod Anupam , Alain Mayer, Detecting hit shaving in click-through payment schemes, Proceedings of the 3rd conference on USENIX Workshop on Electronic Commerce, p.13-13, August 31-September 03, 1998, Boston, Massachusetts
	Shintaro Urabe , Jiahong Wong , Eiichiro Kodama , Toyoo Takata, A high collusion-resistant approach to distributed privacy-preserving data mining, Proceedings of the 25th conference on Proceedings of the 25th IASTED International Multi-Conference: parallel and distributed computing and networks, p.326-331, February 13-15, 2007, Innsbruck, Austria
	Fengjun Li , Bo Luo , Peng Liu , Dongwon Lee , Chao-Hsien Chu, Automaton segmentation: a new approach to preserve privacy in xml information brokering, Proceedings of the 14th ACM conference on Computer and communications security, October 28-31, 2007, Alexandria, Virginia, USA
	G. Aggarwal , M. Bawa , P. Ganesan , H. Garcia-Molina , K. Kenthapadi , N. Mishra , R. Motwani , U. Srivastava , D. Thomas , J. Widom , Y. Xu, Vision paper: enabling privacy for the paranoids, Proceedings of the Thirtieth international conference on Very large data bases, p.708-719, August 31-September 03, 2004, Toronto, Canada
	Mayank Bawa , Roberto J. Bayardo, Jr. , Rakesh Agrawal, Privacy-preserving indexing of documents on the network, Proceedings of the 29th international conference on Very large data bases, p.922-933, September 09-12, 2003, Berlin, Germany
	Hiroyuki Kasai , Wataru Uchida , Shoji Kurakake, A service provisioning system for distributed personalization with private data protection, Journal of Systems and Software, v.80 n.12, p.2025-2038, December, 2007
	Spyridon Papastergiou , Giorgos Valvis , Despina Polemi, A holistic anonymity framework for web services, Proceedings of the 1st international conference on PErvasive Technologies Related to Assistive Environments, July 16-18, 2008, Athens, Greece
	Volker Fusenig , Dagmara Spiewak , Thomas Engel, Acimn protocol: a protocol for anonymous communication in multi hop wireless networks, Proceedings of the sixth Australasian conference on Information security, January 01-01, 2008, Wollongong, NSW, Australia
	Tao Jiang , Helen J. Wang , Yih-Chun Hu, Preserving location privacy in wireless lans, Proceedings of the 5th international conference on Mobile systems, applications and services, June 11-13, 2007, San Juan, Puerto Rico
	Joakim Kalvenes , Amit Basu, Design of Robust Business-to-Business Electronic Marketplaces with Guaranteed Privacy, Management Science, v.52 n.11, p.1721-1736, November 2006
	Kirsten Wahlstrom , Gerald Quirchmayr, The motivation and proposition of a privacy-enhancing architecture for operational databases, Proceedings of the fifth Australasian symposium on ACSW frontiers, January 30-February 02, 2007, Ballarat, Australia
	Yuxin Deng , Catuscia Palamidessi , Jun Pang, Weak Probabilistic Anonymity, Electronic Notes in Theoretical Computer Science (ENTCS), v.180 n.1, p.55-76, June, 2007
	Kevin Bauer , Damon McCoy , Dirk Grunwald , Tadayoshi Kohno , Douglas Sicker, Low-resource routing attacks against tor, Proceedings of the 2007 ACM workshop on Privacy in electronic society, October 29-29, 2007, Alexandria, Virginia, USA
	Marco Gruteser , Dirk Grunwald, Anonymous Usage of Location-Based Services Through Spatial and Temporal Cloaking, Proceedings of the 1st international conference on Mobile systems, applications and services, p.31-42, May 05-08, 2003, San Francisco, California
	Neal Lathia , Stephen Hailes , Licia Capra, Private distributed collaborative filtering using estimated concordance measures, Proceedings of the 2007 ACM conference on Recommender systems, October 19-20, 2007, Minneapolis, MN, USA
	Nicholas Hopper , Eugene Y. Vasserman , Eric Chan-Tin, How much anonymity does network latency leak?, Proceedings of the 14th ACM conference on Computer and communications security, October 28-31, 2007, Alexandria, Virginia, USA
	Rhys Smith , Jianhua Shao, Privacy and e-commerce: a consumer-centric perspective, Electronic Commerce Research, v.7 n.2, p.89-116, June 2007
	Dan Lin , Elisa Bertino , Reynold Cheng , Sunil Prabhakar, Position transformation: a location privacy protection method for moving objects, Proceedings of the SIGSPATIAL ACM GIS 2008 International Workshop on Security and Privacy in GIS and LBS, November 04-04, 2008, Irvine, California
	A. Soppera , T. Burbridge, Maintaining Privacy in Pervasive Computing — Enabling Acceptance of Sensor-Based Services, BT Technology Journal, v.22 n.3, p.106-118, July 2004
	Joan Feigenbaum , Aaron Johnson , Paul Syverson, Probabilistic analysis of onion routing in a black-box model, Proceedings of the 2007 ACM workshop on Privacy in electronic society, October 29-29, 2007, Alexandria, Virginia, USA
	Chase Gray , Jason Byrnes , Srihari Nelakuditi, Pair-wise resistance to traffic analysis in MANETs, ACM SIGMOBILE Mobile Computing and Communications Review, v.12 n.1, January 2008
	Xun Wang , Sriram Chellappan , Phillip Boyer , Dong Xuan, On the Effectiveness of Secure Overlay Forwarding Systems under Intelligent Distributed DoS Attacks, IEEE Transactions on Parallel and Distributed Systems, v.17 n.7, p.619-632, July 2006
	Souvik Ray , Zhao Zhang, An Efficient Anonymity Protocol for Grid Computing, Proceedings of the 5th IEEE/ACM International Workshop on Grid Computing, p.200-207, November 08-08, 2004
	Munawar Hafiz, A collection of privacy design patterns, Proceedings of the 2006 conference on Pattern languages of programs, October 21-23, 2006, Portland, Oregon
	Konstantinos Chatzikokolakis , Catuscia Palamidessi , Prakash Panangaden, On the Bayes risk in information-hiding protocols, Journal of Computer Security, v.16 n.5, p.531-571, November 2008
	Paolo Cencioni , Roberto Di Pietro, A mechanism to enforce privacy in vehicle-to-infrastructure communication, Computer Communications, v.31 n.12, p.2790-2802, July, 2008
	Bryan Parno , Adrian Perrig , Dave Andersen, SNAPP: stateless network-authenticated path pinning, Proceedings of the 2008 ACM symposium on Information, computer and communications security, March 18-20, 2008, Tokyo, Japan
	Wei Jiang , Luo Si , Jing Li, Protecting source privacy in federated search, Proceedings of the 30th annual international ACM SIGIR conference on Research and development in information retrieval, July 23-27, 2007, Amsterdam, The Netherlands
	Markus Hinkelmann , Andreas Jakoby, Communications in unknown networks: Preserving the secret of topology, Theoretical Computer Science, v.384 n.2-3, p.184-200, October, 2007
	Konstantinos Chatzikokolakis , Catuscia Palamidessi , Prakash Panangaden, Anonymity protocols as noisy channels, Information and Computation, v.206 n.2-4, p.378-401, February, 2008
	Samphel Norden , Katherine Guo, Support for resilient Peer-to-Peer gaming, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.51 n.14, p.4212-4233, October, 2007
	Matthew K. Wright , Micah Adler , Brian Neil Levine , Clay Shields, Passive-Logging Attacks Against Anonymous Communications Systems, ACM Transactions on Information and System Security (TISSEC), v.11 n.2, p.1-34, March 2008
	Vicente Benjumea , Javier Lopez , Jose M. Troya, Anonymity analysis in credentials-based systems: A formal framework, Computer Standards & Interfaces, v.30 n.4, p.253-261, May, 2008
	Li Xiong , Subramanyam Chitti , Ling Liu, Preserving data privacy in outsourcing data aggregation services, ACM Transactions on Internet Technology (TOIT), v.7 n.3, p.17-es, August 2007
	Pitipatana Sakarindr , Nirwan Ansari, Adaptive trust-based anonymous network, International Journal of Security and Networks, v.2 n.1/2, p.11-26, March 2007
	Ye Zhu , Xinwen Fu , Riccardo Bettati , Wei Zhao, Analysis of flow-correlation attacks in anonymity network, International Journal of Security and Networks, v.2 n.1/2, p.137-153, March 2007
	Bo Zhu , Sushil Jajodia , Mohan S. Kankanhalli, Building trust in peer-to-peer systems: a review, International Journal of Security and Networks, v.1 n.1/2, p.103-112, September 2006
	Jie Wang , Jun Zhang , Shuting Xu , Weijun Zhong, A novel data distortion approach via selective SSVD for privacy protection, International Journal of Information and Computer Security, v.2 n.1, p.48-70, January 2008
	Hanane Fathi , SeongHan Shin , Kazukuni Kobara , Hideki Imai, Protocols for purpose-restricted anonymous communications in IP-based wireless networks, Computer Communications, v.31 n.15, p.3662-3671, September, 2008
	Stephan Bohacek , Joao Hespanha , Junsoo Lee , Chansook Lim , Katia Obraczka, Game Theoretic Stochastic Routing for Fault Tolerance and Security in Computer Networks, IEEE Transactions on Parallel and Distributed Systems, v.18 n.9, p.1227-1240, September 2007
	Kevin Bauer , Damon McCoy , Dirk Grunwald , Douglas Sicker, BitBlender: light-weight anonymity for BitTorrent, Proceedings of the workshop on Applications of private and anonymous communications, p.1-8, September 22-25, 2008, Istanbul, Turkey
	Roger Dingledine , Nick Mathewson , Paul Syverson, Deploying Low-Latency Anonymity: Design Challenges and Social Factors, IEEE Security and Privacy, v.5 n.5, p.83-87, September 2007
	Arjan Durresi , Vamsi Paruchuri , Mimoza Durresi , Leonard Barolli, Anonymous Routing for Mobile Wireless Ad Hoc Networks, International Journal of Distributed Sensor Networks, v.3 n.1, p.105-117, January 2007
	Buğra Gedik , Ling Liu, Protecting Location Privacy with Personalized k-Anonymity: Architecture and Algorithms, IEEE Transactions on Mobile Computing, v.7 n.1, p.1-18, January 2008
	Michael Backes , Marek Hamerlik , Alessandro Linari , Matteo Maffei , Christos Tryfonopoulos , Gerhard Weikum, Anonymous and censorship resistant content sharing in unstructured overlays, Proceedings of the twenty-seventh ACM symposium on Principles of distributed computing, August 18-21, 2008, Toronto, Canada
	Jiejun Kong , Xiaoyan Hong , Mario Gerla, An Identity-Free and On-Demand Routing Scheme against Anonymity Threats in Mobile Ad Hoc Networks, IEEE Transactions on Mobile Computing, v.6 n.8, p.888-902, August 2007
	Janne Lindqvist , Juha-Matti Tapio, Protecting privacy with protocol stack virtualization, Proceedings of the 7th ACM workshop on Privacy in the electronic society, October 27-27, 2008, Alexandria, Virginia, USA
	Xiaoxin Wu , Elisa Bertino, An Analysis Study on Zone-Based Anonymous Communication in Mobile Ad Hoc Networks, IEEE Transactions on Dependable and Secure Computing, v.4 n.4, p.252-265, October 2007
	Prateek Mittal , Nikita Borisov, Information leaks in structured peer-to-peer anonymous communication systems, Proceedings of the 15th ACM conference on Computer and communications security, October 27-31, 2008, Alexandria, Virginia, USA
	Douglas J. Kelly , Richard A. Raines , Michael R. Grimaila , Rusty O. Baldwin , Barry E. Mullins, A survey of state-of-the-art in anonymity metrics, Proceedings of the 1st ACM workshop on Network data anonymization, October 31-31, 2008, Alexandria, Virginia, USA
	Ren-Yi Xiao, Survey on anonymity in unstructured peer-to-peer systems, Journal of Computer Science and Technology, v.23 n.4, p.660-671, July 2008
	Li-ming Hao , Song-nian Lu , Shu-tang Yang , Ning Liu , Qi-shan Huang, Analysis and Improvement of an Anonymity Scheme for P2P Reputation Systems, IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences, v.E91-A n.10, p.2893-2895, October 2008
	Joakim Kalvenes , Amit Basu, Design of Robust Business-to-Business Electronic Marketplaces with Guaranteed Privacy, Management Science, v.52 n.11, p.1721-1736, November 2006
	Yoshinobu Kawabe , Hideki Sakurada, An Adversary Model for Simulation-Based Anonymity Proof, IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences, v.E91-A n.4, p.1112-1120, April 2008
	Michele Boreale, Quantifying information leakage in process calculi, Information and Computation, v.207 n.6, p.699-725, June, 2009
	Han Chen , Pasquale Malacaria, Quantifying maximal loss of anonymity in protocols, Proceedings of the 4th International Symposium on Information, Computer, and Communications Security, March 10-12, 2009, Sydney, Australia
	Haodong Wang , Bo Sheng , Qun Li, Privacy-aware routing in sensor networks, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.53 n.9, p.1512-1529, June, 2009
	Marek Klonowski , Mirosław Kutyłowski , Bartłomiej Różański, Hiding Data Sources in P2P Networks, Proceeding of the 2005 conference on Applied Public Key Infrastructure: 4th International Workshop: IWAP 2005, p.225-239, May 09, 2005
	Makoto Iguchi , Shigeki Goto, Privacy-conscious P2P data sharing scheme with bogus profile distribution, Web Intelligence and Agent Systems, v.7 n.2, p.209-222, April 2009
	Abdulmutalib Masaud-Wahaishi , Hamada Ghenniwa, Agent-oriented privacy-based information brokering architecture for healthcare environments, International Journal of Telemedicine and Applications, 2009, p.1-17, January 2009
	Stéphanie Delaune , Steve Kremer , Mark Ryan, Verifying privacy-type properties of electronic voting protocols, Journal of Computer Security, v.17 n.4, p.435-487, December 2009
	Jianming Zhou , Wensheng Zhang , Daji Qiao, Protecting storage location privacy in sensor networks, The Fourth International Conference on Heterogeneous Networking for Quality, Reliability, Security and Robustness & Workshops, August 14-17, 2007, Vancouver, Canada
	Mouna Kacimi , Stefano Ortolani , Bruno Crispo, Anonymous opinion exchange over untrusted social networks, Proceedings of the Second ACM EuroSys Workshop on Social Network Systems, p.26-32, March 31-31, 2009, Nuremberg, Germany
	Mayank Bawa , Roberto J. Bayardo, Jr , Rakesh Agrawal , Jaideep Vaidya, Privacy-preserving indexing of documents on the network, The VLDB Journal — The International Journal on Very Large Data Bases, v.18 n.4, p.837-856, August 2009
	Sheng Zhong , Zhiqiang Yang , Tingting Chen, k-Anonymous data collection, Information Sciences: an International Journal, v.179 n.17, p.2948-2963, August, 2009
	Dan Lin , Elisa Bertino , Reynold Cheng , Sunil Prabhakar, Location Privacy in Moving-Object Environments, Transactions on Data Privacy, v.2 n.1, p.21-46, April 2009

INDEX TERMS

Primary Classification:
C. Computer Systems Organization
C.2 COMPUTER-COMMUNICATION NETWORKS
C.2.2 Network Protocols
Subjects: Applications (SMTP, FTP, etc.)

Additional Classification:
C. Computer Systems Organization
C.2 COMPUTER-COMMUNICATION NETWORKS
C.2.0 General
Subjects: Security and protection (e.g., firewalls)

K. Computing Milieux
K.4 COMPUTERS AND SOCIETY
K.4.1 Public Policy Issues
Subjects: Privacy
K.4.4 Electronic Commerce
Subjects: Security

General Terms:
Security

Keywords:
anonymous communication, world-wide-web

REVIEW

"Valentin Cristea : Reviewer"

The Crowds system implements a new approach to protecting users' privacy when they retrieve information on the Web. The approach is based on the idea of grouping Web users into a geographically diverse collection, called a crowd, and hiding ea more...

Collaborative Colleagues:

Michael K. Reiter: colleagues

Aviel D. Rubin: colleagues

Adobe Acrobat

QuickTime

Windows Media Player

Real Player