Private resource allocators and their applications
Private resource allocators and their applications
复制标题
DOI：
10.1109/sp40000.2020.00065
复制
发表时间：
2020-05
期刊：
影响因子：
--
通讯作者：
Sebastian Angel;Sampath Kannan;Zachary B. Ratliff
中科院分区：
文献类型：
--
作者：
Sebastian Angel;Sampath Kannan;Zachary B. Ratliff
本文介绍了一种新的加密原语，称为私有资源分配器（PRA），可用于分配资源（例如，网络带宽、CPU），而不向客户端揭示任何其它客户端是否接收到资源。我们给出了几种结构的PRA，提供从信息理论的差异隐私的保证。PRA在防止一类新的攻击方面很有用，我们称之为基于分配的侧信道攻击。例如，这些攻击可以用来破坏匿名消息传递系统的隐私保证，这些系统是专门为防御侧信道和流量分析攻击而设计的。我们在Alpenhorn中实现了PRA，这是一个最近的匿名消息传递系统，表明PRA将启动会话所需的网络资源增加了16倍（在某些情况下可以低至4倍），但一旦会话建立，就不会增加开销。
This paper introduces a new cryptographic primitive called a private resource allocator (PRA) that can be used to allocate resources (e.g., network bandwidth, CPUs) to a set of clients without revealing to the clients whether any other clients received resources. We give several constructions of PRAs that provide guarantees ranging from information-theoretic to differential privacy. PRAs are useful in preventing a new class of attacks that we call allocation-based side-channel attacks. These attacks can be used, for example, to break the privacy guarantees of anonymous messaging systems that were designed specifically to defend against side-channel and traffic analysis attacks. Our implementation of PRAs in Alpenhorn, which is a recent anonymous messaging system, shows that PRAs increase the network resources required to start a conversation by up to 16× (can be made as low as 4× in some cases), but add no overhead once the conversation has been established.