transparency overlays and applications
play

Transparency Overlays and Applications Melissa Chase (Microsoft - PowerPoint PPT Presentation

Transparency Overlays and Applications Melissa Chase (Microsoft Research Redmond) Sarah Meiklejohn (University College London) 2 (icons by parkjisun from noun project) 2 (icons by parkjisun from noun project) 2 (icons by parkjisun from noun


  1. system GenEventSet Sys CheckEvidence Log event log server log LS CheckEntry Inspect auditor snap monitor snap E BE evidence Gossip = log = dlc t sig snap E snap 20

  2. system GenEventSet Sys CheckEvidence Log event log server log rcpt LS CheckEntry Inspect auditor snap monitor snap E BE a (timed) signature, so LS is accountable evidence Gossip = log = dlc t sig snap E snap 20

  3. system GenEventSet Sys CheckEvidence Log check rcpt event log server log rcpt LS CheckEntry Inspect auditor snap monitor snap E BE a (timed) signature, so LS is accountable evidence Gossip = log = dlc t sig snap E snap 20

  4. system GenEventSet Sys CheckEvidence Log check rcpt event log server log rcpt LS update log -add event to E CheckEntry -update dlc Inspect -update snap auditor snap monitor snap E BE a (timed) signature, so LS is accountable evidence Gossip = log = dlc t sig snap E snap 20

  5. system Sys GenEventSet CheckEvidence Log LS log server log Auditor CheckEntry Inspect auditor snap monitor snap E BE evidence Gossip = log = dlc t sig snap E snap 21

  6. system Sys GenEventSet CheckEvidence event Log LS log server log Auditor CheckEntry Inspect auditor snap monitor snap E BE evidence Gossip = log = dlc t sig snap E snap 21

  7. system Sys GenEventSet CheckEvidence event Log LS log server log LS Auditor CheckEntry update? Inspect auditor snap monitor snap E BE evidence Auditor Gossip = log = dlc t sig snap E snap 21

  8. system Sys GenEventSet CheckEvidence event Log LS log server log LS Auditor CheckEntry update? Inspect snap A auditor snap monitor snap E BE evidence Auditor Gossip = log = dlc t sig snap E snap 21

  9. system Sys GenEventSet CheckEvidence event Log LS log server log LS Auditor ProveAppend CheckEntry update? Inspect snap A auditor snap monitor snap E BE evidence Auditor Gossip = log = dlc t sig snap E snap 21

  10. system Sys GenEventSet CheckEvidence event Log LS log server log LS Auditor ProveAppend CheckEntry update? Inspect snap A snap LS , π auditor snap monitor snap E BE evidence Auditor Gossip = log = dlc t sig snap E snap 21

  11. system Sys GenEventSet CheckEvidence event Log LS log server log LS Auditor ProveAppend CheckEntry update? Inspect snap A snap LS , π auditor snap monitor snap E BE evidence Auditor Gossip CheckAppend = log = dlc t sig snap E snap 21

  12. system Sys GenEventSet CheckEvidence event Log LS log server log event LS Auditor ProveAppend CheckEntry update? Inspect snap A snap LS , π auditor snap monitor snap E BE evidence Auditor Gossip CheckAppend = log = dlc t sig snap E snap 21

  13. system Sys GenEventSet CheckEvidence event Log LS log server log event ProveIncl LS Auditor ProveAppend CheckEntry update? Inspect snap A snap LS , π auditor snap monitor snap E BE evidence Auditor Gossip CheckAppend = log = dlc t sig snap E snap 21

  14. system Sys GenEventSet CheckEvidence event Log LS log server log event ProveIncl LS Auditor ProveAppend CheckEntry update? Inspect CheckIncl snap A snap LS , π auditor snap monitor snap E BE evidence Auditor Gossip CheckAppend = log = dlc t sig snap E snap 21

  15. system Sys GenEventSet CheckEvidence event Log LS log server log b event ProveIncl LS Auditor ProveAppend CheckEntry update? Inspect CheckIncl snap A snap LS , π auditor snap monitor snap E BE evidence Auditor Gossip CheckAppend = log = dlc t sig snap E snap 21

  16. system GenEventSet LS CheckEvidence Log log server log CheckEntry Inspect Monitor auditor snap monitor snap E BE evidence Gossip = log = dlc t sig snap E snap 22

  17. system GenEventSet LS CheckEvidence Log log server log snap M CheckEntry Inspect Monitor auditor snap monitor snap E BE evidence Gossip = log = dlc t sig snap E snap 22

  18. system GenEventSet LS CheckEvidence Log find E Δ (events since snap M ) log server log snap M CheckEntry Inspect Monitor auditor snap monitor snap E BE evidence Gossip = log = dlc t sig snap E snap 22

  19. system GenEventSet LS CheckEvidence Log find E Δ (events since snap M ) log server log snap LS ,E Δ snap M CheckEntry Inspect Monitor auditor snap monitor snap E BE evidence Gossip = log = dlc t sig snap E snap 22

  20. system GenEventSet LS CheckEvidence Log find E Δ (events since snap M ) log server log snap LS ,E Δ snap M CheckEntry Inspect Monitor Append(E Δ ,dlc M ) = dlc LS ? auditor snap monitor snap E BE use checks to update BE evidence Gossip = log = dlc t sig snap E snap 22

  21. system Monitor Auditor GenEventSet CheckEvidence Log log server log CheckEntry Inspect auditor snap monitor snap E BE evidence Gossip = log = dlc t sig snap E snap 23

  22. system Monitor Auditor GenEventSet snap M ,snap A CheckEvidence Log log server log CheckEntry Inspect auditor snap monitor snap E BE evidence Gossip = log = dlc t sig snap E snap 23

  23. system Monitor Auditor GenEventSet snap M ,snap A CheckEvidence Log log server log DemoInconsistent(E,dlc A ,t A ) π CheckEntry Inspect auditor snap monitor snap E BE evidence Gossip = log = dlc t sig snap E snap 23

  24. system Monitor Auditor GenEventSet snap M ,snap A CheckEvidence Log log server log DemoInconsistent(E,dlc A ,t A ) π b ← CheckInconsistent(dlc A ,t A ,dlc M , π ) if b return (snap A ,snap M , π ) CheckEntry Inspect auditor snap monitor snap E BE evidence Gossip = log = dlc t sig snap E snap 23

  25. system Monitor Auditor GenEventSet snap M ,snap A CheckEvidence Log log server log DemoInconsistent(E,dlc A ,t A ) checks that π (1) snapshots b ← CheckInconsistent(dlc A ,t A ,dlc M , π ) are signed by LS and if b return (snap A ,snap M , π ) (2) π proves CheckEntry Inspect inconsistency auditor snap monitor snap E BE evidence Gossip = log = dlc t sig snap E snap 23

  26. security ability to carry out DemoInconsistent, ProveAppend, and ProveIncl ⇒ consistency unforgeability of DemoInconsistent, DemoNotIncl * , and signature scheme ⇒ non-frameability ability to carry out DemoNotIncl * ⇒ accountability *uses pledged version in which Auditor keeps track of failed events and gossips about them with Monitor to produce new type of evidence 24

  27. goal: bad events are exposed 25

  28. system receives promises to include events in the log goal: bad events are exposed 25

  29. system receives promises to include events in the log system log server CheckEntry auditor + auditors determine if these events are in the log goal: bad events are exposed 25

  30. system receives promises to include events in the log system log server CheckEntry auditor + auditors determine if these events are in the log monitor auditor Gossip + auditors and monitors ensure consistent view of log goal: bad events are exposed 25

  31. system receives promises to include events in the log system log server CheckEntry auditor + auditors determine if these events are in the log monitor auditor Gossip + auditors and monitors ensure consistent view of log ⇒ (by consistency+accountability) event is in monitor’s view of the log goal: bad events are exposed 25

  32. system receives promises to include events in the log system log server CheckEntry auditor + auditors determine if these events are in the log monitor auditor Gossip + auditors and monitors ensure consistent view of log ⇒ (by consistency+accountability) event is in monitor’s view of the log log server Inspect monitor + monitors detect bad events in the log ⇒ goal: bad events are exposed 25

  33. which systems? system GenEventSet CheckEvidence Log log server log design (add LS,Au,Mo) security CheckEntry Inspect (consistency) (non-frameability) auditor snap monitor snap E BE (accountability) construction construction evidence Gossip (dlc+sig) 26

  34. which systems? which systems? system GenEventSet CheckEvidence Log log server log design (add LS,Au,Mo) security CheckEntry Inspect (consistency) (non-frameability) auditor snap monitor snap E BE (accountability) construction evidence Gossip (dlc+sig) 26

  35. Certificate Transparency CA website client CheckEvidence Log log server log CheckEntry Inspect auditor snap monitor snap E BE evidence Gossip bad certificate issuance is exposed ⇒ clients are less likely to accept bad certificates 27 (icon by parkjisun from noun project)

  36. Bitcoin blockchain receiver sender miner Log CheckEvidence log server log CheckEntry Inspect auditor snap monitor snap E BE evidence Gossip double spending is exposed 28

  37. Bitcoin blockchain receiver sender miner Log CheckEvidence log server log CheckEntry Inspect auditor snap monitor snap E BE evidence Gossip double spending is exposed … provably! 28

  38. Bitcoin blockchain receiver sender miner Log CheckEvidence log server log CheckEntry Inspect auditor snap monitor snap E BE evidence Gossip double spending is exposed … provably! sender and receiver don’t need to store blockchain 28

Recommend


More recommend