Measuring relationship anonymity in mix networks

Many applications of mix networks such as anonymous Web browsing require relationship anonymity: it should be hard for the attacker to determine who is communicating with whom. Conventional methods for measuring anonymity, however, focus on sender anonymity instead. Sender anonymity guarantees that it is difficult for the attacker to determine the origin of any given message exiting the mix network, but this may not be sufficient to ensure relationship anonymity. Even if the attacker cannot identify the origin of messages arriving to some destination, relationship anonymity will fail if he can determine with high probability that at least one of the messages originated from a particular sender, without necessarily being able to recognize this message among others. We give a formal definition and a calculation methodology for relationship anonymity. Our techniques are similar to those used for sender anonymity, but, unlike sender anonymity, relationship anonymity is sensitive to the...

• Type: Conference
• Year: 2006
• Where: WPES
• Authors: Vitaly Shmatikov, Ming-Hsiu Wang
• Keywords: Relationship Anonymity, Require Relationship Anonymity, Security Privacy, Sender Anonymity, WPES 2006