Architecture for Enterprise Anonymization

ABSTRACT:The Web is an indispensable part of communication and research, yet brings an often unseen cost: Third parties--search engine providers, web site maintainers, ISPs, and even eavesdroppers--are provided with a look at our topics of interest. This exposure violates operational security (OPSEC) and exposes us to espionage. Encryption mitigates some risks but is helpless against others. Existing anonymity technology, such as Tor, is encumbered by scalability, performance, usability, and security problems to the point that it has not been adopted by enterprises. We propose new technology to meet enterprises' privacy, anonymity, and OPSEC requirements in a scalable, high performance manner, developed for enterprises from the ground up. Our approach consists of a completely isolated web database, including a search engine, supplemented with a pool of remotely controlled disposable virtual machines. We have successfully prototyped and demonstrated this approach during Phase I. Our experience in digital forensics, cybersecurity, network design, and enterprise software engineering makes our team uniquely suited to succeed.BENEFIT:Technology to allow military, government, and industrial enterprises to use the Web anonymously, while maintain enterprise level scalability and performance. This technology will allow enterprises access to the Web--today's premier source of information and communication--without revealing their topics of interest and research or violating OPSEC.