[rssac-caucus] Including the ASN advice in the anonymizing document
Greetings again. This thread is based on a request to remove the discussion publishing ASNs with anonymized data. The text put in the document based on a request from Geoff Huston. John Bond has requested that it be removed. The current text says: ===== 4 Saving Additional Information When Anonymizing In order to help researchers looking at anonymized data, the process of anonymization can preserve some information relating to the originating Autonomous System (AS) number of the querier. A side effect of anonymization is that it destroys any possibility of establishing the origin AS of the querier. If the origin AS is sufficiently general that it does not unnecessarily expose data that should have been anonymized, it is useful to also publish the AS numbers of the anonymized addresses. This can most easily be done with a table that maps the anonymized addresses to their original AS numbers. ===== Recommendation 3: Autonomous System (AS) numbers of original addresses should be made available with the anonymized data. It should be possible for an operator to publish a machine-readable table that maps the anonymized addresses to the AS of the original data. Such a table should have a timestamp for when the mapping was made due to AS values changing over time. ===== RSSAC Caucus: please weigh in. --Paul Hoffman
Thanks Paul, I have mixed feelings. On one hand I think inclusion of AS mapping probably weakens the effect of anonymization to the point where an operator concerned enough to anonymize probably wouldn't want to risk including the AS mapping data. On the other hand I think it could be interesting to consider IP->AS as an anonymization technique all on its own. Lastly, I think none of our current capture/collection tools have good support for IP->AS mapping. Not really RSSAC's problem, I know, but someone would have to fund and develop this feature in the tools. DW
On Feb 22, 2018, at 11:05 AM, Paul Hoffman <paul.hoffman@icann.org> wrote:
Greetings again. This thread is based on a request to remove the discussion publishing ASNs with anonymized data. The text put in the document based on a request from Geoff Huston. John Bond has requested that it be removed.
The current text says:
=====
4 Saving Additional Information When Anonymizing
In order to help researchers looking at anonymized data, the process of anonymization can preserve some information relating to the originating Autonomous System (AS) number of the querier. A side effect of anonymization is that it destroys any possibility of establishing the origin AS of the querier. If the origin AS is sufficiently general that it does not unnecessarily expose data that should have been anonymized, it is useful to also publish the AS numbers of the anonymized addresses. This can most easily be done with a table that maps the anonymized addresses to their original AS numbers.
=====
Recommendation 3: Autonomous System (AS) numbers of original addresses should be made available with the anonymized data.
It should be possible for an operator to publish a machine-readable table that maps the anonymized addresses to the AS of the original data. Such a table should have a timestamp for when the mapping was made due to AS values changing over time.
=====
RSSAC Caucus: please weigh in.
--Paul Hoffman_______________________________________________ rssac-caucus mailing list rssac-caucus@icann.org https://mm.icann.org/mailman/listinfo/rssac-caucus
participants (2)
-
Paul Hoffman -
Wessels, Duane