Data retention and anonymity services: Introducing a new class of realistic adversary models

Research output: Contribution to book/conference proceedings/anthology/reportConference contributionContributedpeer-review



The recently introduced legislation on data retention to aid prosecuting cyber-related crime in Europe also affects the achievable security of systems for anonymous communication on the Internet. We argue that data retention requires a review of existing security evaluations against a new class of realistic adversary models. In particular, we present theoretical results and first empirical evidence for intersection attacks by law enforcement authorities. The reference architecture for our study is the anonymity service AN.ON, from which we also collect empirical data. Our adversary model reflects an interpretation of the current implementation of the EC Directive on Data Retention in Germany.


Original languageEnglish
Title of host publicationThe Future of Identity in the Information Society - 4th IFIP WG 9.2, 9.6/11.6, 11.7/ FIDIS International Summer School, Revised Selected Papers
EditorsVashek Matyas, Petr Svenda, Simone Fischer-Hubner, Daniel Cvrcek
PublisherSpringer Verlag, New York
Number of pages15
ISBN (print)9783642033148
Publication statusPublished - 2009

Publication series

SeriesIFIP Advances in Information and Communication Technology


Title4th IFIP WG 9.2, 9.6/11.6, 11.7/FIDIS International Summer School, 2008
Duration1 - 7 September 2008
CountryCzech Republic

External IDs

ORCID /0000-0002-0466-562X/work/142246151