A Conjunction, Language, and System Facets for Private Packet Filtering

Abstract

Our contribution de nes a conjunction operator for private stream searching, integrates this operator into a high level language, and describes the system facets that achieve a realization of private packet ltering. Private stream searching uses an encrypted lter to conceal search terms, processes a search without decrypting the lter, and saves encrypted results to an output bu er. Our conjunction operator is processed as a bitwise summation of hashed keyword values and as a reference into the lter. The operator thus broadens the search capability, and does not increase the complexity of the private search system. When integrated into the language, cyber defenders can lter packets using sensitive attack indicators, and gain situational awareness without revealing those sensitive indicators.