SpreadMeNot: A Provably Secure and Privacy-Preserving Contact Tracing Protocol
SpreadMeNot: A Provably Secure and Privacy-Preserving Contact Tracing Protocol
复制标题
SpreadMeNot：可证明安全且保护隐私的接触者追踪协议
DOI：
10.1109/tdsc.2022.3186153
复制
发表时间：
2020
影响因子：
7.3
通讯作者：
R. D. Pietro
中科院分区：
文献类型：
--
作者：
Pietro Tedeschi;S. Bakiras;R. D. Pietro
在对抗 Covid-19 的斗争中，世界多个国家开发并部署了大量接触者追踪应用程序。然而，人们有理由担心此类应用程序的安全和隐私风险。为了解决这些问题，在本文中我们提供了两个主要贡献。首先，我们深入分析了最重要的接触者追踪协议在被动和主动对手下的安全和隐私特征。我们的研究结果表明，所有协议都容易受到各种攻击，这主要是由于底层加密协议的确定性。我们的第二个贡献是 SpreadMeNot 的设计和实现，这是一种新颖的联系人跟踪协议，可以防御大多数被动和主动攻击，从而提供此类敏感应用程序所需的强大（可证明）安全和隐私保证。我们的详细分析（包括正式分析和实验分析）表明，SpreadMeNot 满足安全、隐私和性能要求，因此是构建可供大多数公众采用的接触者追踪解决方案的理想候选者，并可作为该领域进一步发展的开源参考。
A plethora of contact tracing apps have been developed and deployed in several countries around the world in the battle against Covid-19. However, people are rightfully concerned about the security and privacy risks of such applications. To address these issues, in this paper we provide two main contributions. First, we present an in-depth analysis of the security and privacy characteristics of the most prominent contact tracing protocols, under both passive and active adversaries. The results of our study indicate that all protocols are vulnerable to a variety of attacks, mainly due to the deterministic nature of the underlying cryptographic protocols. Our second contribution is the design and implementation of SpreadMeNot, a novel contact tracing protocol that can defend against most passive and active attacks, thus providing strong (provable) security and privacy guarantees that are necessary for such a sensitive application. Our detailed analysis, both formal and experimental, shows that SpreadMeNot satisfies security, privacy, and performance requirements, hence being an ideal candidate for building a contact tracing solution that can be adopted by the majority of the general public, as well as to serve as an open-source reference for further developments in the field.
影响因子：
--
作者：
Marius Wernke;P. Skvortsov;Frank Dürr;K. Rothermel
通讯作者：
Marius Wernke;P. Skvortsov;Frank Dürr;K. Rothermel