Sensed location data is subject to inference attacks by cybercriminals that aim to obtain the exact position of sensitive locations, such as the victim's home and work locations, to launch a variety of different attacks. Various Location-Privacy Preserving Mechanisms (LPPMs) exist to reduce the probability of success of inference attacks on location data. However, such mechanisms have been shown to be less effective when the adversary is informed of the protection mechanism adopted, also known as white-box attacks. We propose a novel approach that makes use of targeted agility maneuvers as a more robust defense against white-box attacks. Agility maneuvers are systematically activated in response to specific system events to rapidly and continuously control the rate of change in system configurations and increase diversity in the space of readings, which would decrease the probability of success of inference attacks by an adversary. Experimental results, performed on a real data set, show that the adoption of agility maneuvers reduces the probability of success of white-box attacks to 2.68% on average, compared to 56.92% when using state-of-the-art LPPMs.
[1]
KARSTEN DANZMANN.
LISA
,
1995
.
[2]
Muttukrishnan Rajarajan,et al.
Location Security -- Where to Enforce?
,
2014,
2014 IEEE Military Communications Conference.
[3]
John Krumm,et al.
Inference Attacks on Location Tracks
,
2007,
Pervasive.
[4]
Carmela Troncoso,et al.
Protecting location privacy: optimal strategy against localization attacks
,
2012,
CCS.
[5]
S. Arunkumar,et al.
A review paper on preserving privacy in mobile environments
,
2015,
J. Netw. Comput. Appl..
[6]
Jean-Yves Le Boudec,et al.
Quantifying Location Privacy
,
2011,
2011 IEEE Symposium on Security and Privacy.
[7]
Catuscia Palamidessi,et al.
Geo-indistinguishability: differential privacy for location-based systems
,
2012,
CCS.
[8]
Li Xiong,et al.
Protecting Locations with Differential Privacy under Temporal Correlations
,
2014,
CCS.
[9]
George Theodorakopoulos,et al.
The Same-Origin Attack against Location Privacy
,
2015,
WPES@CCS.