Revocable anonymity in network monitoring systems

Abstract

Ensuring subscriber's privacy in a network security monitoring system is usually in the conflict with security and accountability controls that are imposed by the security policy. This balance between subscriber's anonymity and visibility is often a dilemma for service providers and enterprises. This paper presents results of author's research in the field of distributed network security monitoring architectures and the proposal of such a monitoring system that incorporates cryptographic protocols and a group signature scheme to deliver privacy protecting, network surveillance system architecture that provides subscriber's accountability and controlled, revocable anonymity. © 2011 Springer-Verlag.