Home > Publications
Home University of Twente
Prospective Students
Intranet (internal)

EEMCS EPrints Service

27921 Reliably determining data leakage in the presence of strong attackers
Home Policy Brochure Browse Search User Area Contact Help

Bortolameotti, R. and Peter, A. and Everts, M.H. and Jonker, W. and Hartel, P.H. (2016) Reliably determining data leakage in the presence of strong attackers. In: Proceedings of the 32nd Annual Conference on Computer Security Applications, ACSAC 2016. pp. 484-495. ACM. ISBN 978-1-4503-4771-6

Full text available as:

- Univ. of Twente only
805 Kb
Open Access

Official URL:


We address the problem of determining what data has been leaked from a system after its recovery from a successful attack. This is a forensic process which is relevant to give a better understanding of the impact of a data breach, but more importantly it is becoming mandatory according to the recent developments of data breach notification laws. Existing work in this domain has discussed methods to create digital evidence that could be used to determine data leakage, however most of them fail to secure the evidence against malicious adversaries or use strong assumptions such as trusted hardware. In some limited cases, data can be processed in the encrypted domain which, although being computationally expensive, can ensure that nothing leaks to an attacker, thereby making the leakage determination trivial. Otherwise, victims are left with the only option of considering all data to be leaked.

In contrast, our work presents an approach capable of determining the data leakage using a distributed log that securely records all accesses to the data without relying on trusted hardware, and which is not all-or-nothing. We demonstrate our approach to guarantee secure and reliable evidence against even strongest adversaries capable of taking complete control over a machine. For the concrete application of client-server authentication, we show the preciseness of our approach, that it is feasible in practice, and that it can be integrated with existing services.

Item Type:Conference or Workshop Paper (Full Paper, Talk)
Research Group:EWI-SCS: Services, Cyber security and Safety
Research Program:CTIT-General
Research Project:COMMIT/THeCS: Trusted Healthcare Systems
ID Code:27921
Deposited On:29 April 2017
More Information:statistics

Export this item as:

To request a copy of the PDF please email us request copy

To correct this item please ask your editor

Repository Staff Only: edit this item