Packet trace anonymization with PktAnon


If you’re a network researcher or systems administrator, you know that network traces are often necessary, but not easy to share with colleagues and other researchers. To help with both ease of use and handling of sensitive information, the Institute of Telematics has developed PktAnon, a framework that anonymizes network traffic.

It works by using a profile-based scheme that supports various anonymization primitives, making it easy to switch between different network protocols and anonymization methods. New primitives can easily be added, and several pre-defined profiles are bundled into the distro. The profiles are all XML-based.

Essentially, there are two major uses for network traces: anonymizing user traffic in order to research it, and anonymizing in-house usage, thus preventing the leakage of sensitive information. It’s a rather rigid scheme, but using profiles for this was a stroke of genius that made it a lot easier, more flexible, and as a result, more useful and powerful.

[via TaoSecurity]
[photo: mlpoulter]

Comments

  1. bgugi says:

    scientology raids…
    come on, guys…
    rules 1 and 2…

  2. Anon says:

    I lol’d at the picture, and the again @ 1

    It is interesting. I guess if you were paranoid enough, you’d use peer guardian, tor and multiple proxies with this, just in case.

  3. David Mudkips says:

    Chuckle @ your choice of images. Thank you.

  4. Anonymous says:

    Raid today! 11am, 146 Queen Victoria Street, London. Be thar.

  5. Anonymous says:

    Anonymous of the $cientology fame thanks you for the nice pic of us!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Follow

Get every new post delivered to your Inbox.

Join 91,934 other followers