van der Linden, Dirk Edwards, Matthew Hadar, Irit Zamansky, Anna
Published in
Proceedings on Privacy Enhancing Technologies
We report on a mixed-method, comparative study investigating whether there is a difference between privacy concerns expressed about pet wearables as opposed to human wearables – and more importantly, why. We extracted the privacy concerns found in product reviews (N=8,038) of pet wearables (activity, location, and dual-function trackers), contrasti...
Singla, Ankush Hussain, Syed Rafiul Chowdhury, Omar Bertino, Elisa Li, Ninghui
Published in
Proceedings on Privacy Enhancing Technologies
This paper focuses on protecting the cellular paging protocol — which balances between the quality-of-service and battery consumption of a device — against security and privacy attacks. Attacks against this protocol can have severe repercussions, for instance, allowing attacker to infer a victim’s location, leak a victim’s IMSI, and inject fabricat...
Chakraborti, Anrin Sion, Radu
Published in
Proceedings on Privacy Enhancing Technologies
Oblivious RAMs (ORAMs) allow a client to access data from an untrusted storage device without revealing the access patterns. Typically, the ORAM adversary can observe both read and write accesses. Write-only ORAMs target a more practical, multi-snapshot adversary only monitoring client writes – typical for plausible deniability and censorship-resil...
Hoffmann, Max Klooß, Michael Raiber, Markus Rupp, Andy
Published in
Proceedings on Privacy Enhancing Technologies
Black-box accumulation (BBA) is a building block which enables a privacy-preserving implementation of point collection and redemption, a functionality required in a variety of user-centric applications including loyalty programs, incentive systems, and mobile payments. By definition, BBA+ schemes (Hartung et al. CCS ‘17) offer strong privacy and se...
Chatzikokolakis, Kostas Johnson, Aaron
Published in
Proceedings on Privacy Enhancing Technologies
Pulls, Tobias Dahlberg, Rasmus
Published in
Proceedings on Privacy Enhancing Technologies
Website Fingerprinting (WF) attacks are a subset of traffic analysis attacks where a local passive attacker attempts to infer which websites a target victim is visiting over an encrypted tunnel, such as the anonymity network Tor. We introduce the security notion of a Website Oracle (WO) that gives a WF attacker the capability to determine whether a...
Fischer, Andreas Fuhry, Benny Kerschbaum, Florian Bodden, Eric
Published in
Proceedings on Privacy Enhancing Technologies
Encrypting data before sending it to the cloud protects it against attackers, but requires the cloud to compute on encrypted data. Trusted modules, such as SGX enclaves, promise to provide a secure environment in which data can be decrypted and then processed. However, vulnerabilities in the executed program, which becomes part of the trusted code ...
Smullen, Daniel Feng, Yuanyuan Aerin Zhang, Shikun Sadeh, Norman
Published in
Proceedings on Privacy Enhancing Technologies
In today’s data-centric economy, data flows are increasingly diverse and complex. This is best exemplified by mobile apps, which are given access to an increasing number of sensitive APIs. Mobile operating systems have attempted to balance the introduction of sensitive APIs with a growing collection of permission settings, which users can grant or ...
Namara, Moses Wilkinson, Daricia Caine, Kelly Knijnenburg, Bart P.
Published in
Proceedings on Privacy Enhancing Technologies
Virtual Private Networks (VPNs) can help people protect their privacy. Despite this, VPNs are not widely used among the public. In this survey study about the adoption and usage of VPNs, we investigate people’s motivation to use VPNs and the barriers they encounter in adopting them. Using data from 90 technologically savvy participants, we find tha...
Celosia, Guillaume Cunche, Mathieu
Published in
Proceedings on Privacy Enhancing Technologies
Apple Continuity protocols are the underlying network component of Apple Continuity services which allow seamless nearby applications such as activity and file transfer, device pairing and sharing a network connection. Those protocols rely on Bluetooth Low Energy (BLE) to exchange information between devices: Apple Continuity messages are embedded ...
