Re: [dtn-security] Traffic Analysis Protection

M.Bhutta@surrey.ac.uk wrote:
> Hello,
> I am working on traffic analysis protection for DTN networks. From the 
> "DTN Security Internet Draft" there are some
> questions about this which I wanted to be discussed on the DTNRG 
> security mailing list.
> 
> 1. To what extent there is a real need for a generic scheme for 
> protection against traffic analysis.
> 2. How to define such generic scheme for delay and disruption tolerant 
> networks and should not consume too much resources like for Sensors.
> 3. Should Traffic analysis protection be left on underlying network 
> layers than DTN layer.
> 
> To completely stop the traffic analysis, following counter-measures 
> should be taken into account to avoid the traffic analysis:
> 1. Encryption
> 2. Masking (sending dummy traffic like encrypted message to show 
> channedl 100% busy)

I'd be interested in how you would do that without causing
yourself a DoS, i.e in what circumstances would fake traffic
be safe?

> 3. Hiding time and size information of traffic

The BP's not that good in this respect, since we can't encrypt
the primary bundle, so you'd probably have to do bundle in
bundle encapsulation. Again, I'd be interested in what you come
up with,
Regards,
Stephen.

> 
> taking into considerations the above questions and the counter-measures, 
> we can go towards how we should provide such a solution for
> DTN Networks and which counter-measures are realy important for DTN 
> based networks while considering the internet networks and 
> non-internetnetworks like sensor networks and the solution should use 
> less resources as possible.
> 
> best regards
> Nasir
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> dtn-security mailing list
> dtn-security@mailman.dtnrg.org
> http://maillists.intel-research.net/mailman/listinfo/dtn-security