Pré-Publication, Document De Travail Année : 2016

Aviary: Distributed, Tamper-Proof, Per-User Warrant Canaries

Abhishek Bose-Kolanu
  • Fonction : Auteur
  • PersonId : 995169

Résumé

Governments routinely claim the power to subject individuals to secret investigation, forcing technology Service Providers to divulge User data without notification. Warrant canaries invert the notification problem by telling a User each time a Service Provider has not received a secret request for their data. Current canaries suffer from non-standardization, poor granularity, and brittleness in the face of attacks, leading the Electronic Frontier Foundation and Berkman Center to discontinue their Canary Watch service, which previously aggregated and monitored Service Provider warrant canaries, in May 2016. Aviary is a distributed, tamper-proof, per-user warrant canary system intended to automate and replace obsolete canary practices. Aviary provides confidential, private, and secure warrant canaries with massively distributed auditing. This paper presents the Aviary system, analyzes it in the context of a threat model assuming a government-level adversary, and presents several mitigation strategies that inform the design of our distributed architecture. To our knowledge, Aviary is the first scheme for global, distributed, confidential per-user warrant canaries, and among the first works to model a distributed system explicitly against the pervasive adversary outlined in the Internet Architecture Board's RFC 7624, "Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement."

Fichier principal
Vignette du fichier
bobo HAL submission Aviary 12 04 2016.pdf (603.63 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence
Loading...

Dates et versions

hal-01408456 , version 1 (05-12-2016)

Licence

Identifiants

  • HAL Id : hal-01408456 , version 1

Citer

Abhishek Bose-Kolanu. Aviary: Distributed, Tamper-Proof, Per-User Warrant Canaries. 2016. ⟨hal-01408456⟩
211 Consultations
554 Téléchargements

Partager

  • More