Ecole d'ingénieur et centre de recherche en Sciences du numérique

EphPub: Toward robust ephemeral publishing

Castelluccia, Claude; Francillon, Aurélien; De Cristofaro, Emiliano; Kaafar, Mohamed

ICNP 2011, IEEE International Conference on Network Protocols, October 17-20, Vancouver, Canada

The increasing amount of personal and sensitive information disseminated over the Internet prompts commensurately growing privacy concerns. Digital data often lingers indefinitely and users lose its control. This motivates the desire to restrict content availability to an expiration time set by the data owner. This paper presents and formalizes the notion of Ephemeral Publishing (EphPub), to prevent the access to expired content. We propose an efficient and robust protocol that builds on the Domain Name System (DNS) and its caching mechanism. With EphPub, sensitive content is published encrypted and the key material is distributed, in a steganographic manner, to randomly selected and independent resolvers. The availability of content is then limited by the evanescence of DNS cache entries. The EphPub protocol is transparent to existing applications, and does not rely on trusted hardware, centralized servers, or user proactive actions. We analyze its robustness and show that it incurs a negligible overhead on the DNS infrastructure. We also perform a large-scale study of the caching behavior of 900K open DNS resolvers. Finally, we propose Firefox and Thunderbird extensions that provide ephemeral publishing capabilities, as well as a command-line tool to create ephemeral files.

Document Doi Bibtex

Titre:EphPub: Toward robust ephemeral publishing
Département:Sécurité numérique
Eurecom ref:3501
Copyright: © 2011 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.
Bibtex: @inproceedings{EURECOM+3501, doi = {}, year = {2011}, title = {{E}ph{P}ub: {T}oward robust ephemeral publishing}, author = {{C}astelluccia, {C}laude and {F}rancillon, {A}ur{\'e}lien and {D}e {C}ristofaro, {E}miliano and {K}aafar, {M}ohamed}, booktitle = {{ICNP} 2011, {IEEE} {I}nternational {C}onference on {N}etwork {P}rotocols, {O}ctober 17-20, {V}ancouver, {C}anada}, address = {{V}ancouver, {CANADA}}, month = {10}, url = {} }
Voir aussi: