Bunker: a privacy-oriented platform for network tracing

摘要: ISPs are increasingly reluctant to collect and store raw network traces because they can be used compromise their customers' privacy. Anonymization techniques mitigate this concern by protecting sensitive information. Trace anonymization performed offline (at a later time) or online collection time). Offline suffers from privacy problems must stored on disk - until the deleted, there is potential for accidental leaks exposure subpoenas. Online drastically reduces risks but complicates software engineering efforts trace processing at line speed. This paper presents Bunker, tracing system that combines development benefits of with anonymization. Bunker uses virtualization, encryption, restricted I/O interfaces protect software, exporting only an anonymized trace. We present design implementation evaluate its security properties, show ease use developing complex application.