Publication Type : Conference Paper
Publisher : 2019 Twelfth International Conference on Contemporary Computing (IC3), IEEE
Source : 2019 Twelfth International Conference on Contemporary Computing (IC3), IEEE, Noida, India, India (2019)
Url : https://ieeexplore.ieee.org/abstract/document/8844917
Keywords : Anonymity, anonymous whistleblowing, Authentication, Automated Validation of Internet Security Protocols and Application, AVISPA, Browsers, complete end-to-end encryption strategy, completely software-based platforms, Computer architecture, computer network security, Confidentiality, cryptographic protocols, cryptographic security, Encryption, identified security issues, Internet, Media, Organizations, Plausible Deniability, Privacy, robust end-to-end encryption architecture, secure whistleblowing, Security Architecture, Servers, software-based whistleblowing platforms, Usable Security, whistleblower, Whistleblowing, whistleblowing mechanism, Whistleblowing Platforms
Campus : Coimbatore
School : School of Engineering
Department : Computer Science
Year : 2019
Abstract : Much has been mentioned about the importance of whistleblowing. While all organizations are recommended to have a whistleblowing mechanism, there are very few completely software-based platforms that assist in performing this task securely. The primary concerns are to ensure that the whistleblower remains anonymous and the disclosures are securely delivered to the competent authority, usually media organizations. In this paper, we have analyzed the security of the state of the art software-based whistleblowing platforms and related research, identified security issues and proposed a new architecture that satisfactorily ensures the requirements for anonymous and secure whistleblowing. We have verified the strength of our solution against the existing platforms and related research with the AVISPA (Automated Validation of Internet Security Protocols and Applications) tool. Our approach is practical, backed by cryptographic security and, because of its modularity, can be easily included in the current infrastructure of many whistleblowing platforms. The results show that our architecture is simple, robust and implements a complete end-to-end encryption strategy thus enabling secure and anonymous whistleblowing.
Cite this Research Publication : H. Jayakrishnan and Ritwik Murali, “A Simple and Robust End-to-End Encryption Architecture for Anonymous and Secure Whistleblowing”, in 2019 Twelfth International Conference on Contemporary Computing (IC3), Noida, India, India, 2019.