FLAIM: A Multi-level Anonymization Framework for Computer and Network Logs

TL;DR

FLAIM is a flexible, modular framework for log anonymization that enables multi-level privacy controls, balancing information utility and security for diverse log types.

Contribution

This paper introduces FLAIM, a novel, modular framework that supports multi-level anonymization for logs, addressing limitations of existing anonymizers.

Findings

Supports fine-grained privacy-utility trade-offs

Modular architecture adaptable to various log types

Enhances privacy without sacrificing essential log information

Abstract

FLAIM (Framework for Log Anonymization and Information Management) addresses two important needs not well addressed by current log anonymizers. First, it is extremely modular and not tied to the specific log being anonymized. Second, it supports multi-level anonymization, allowing system administrators to make fine-grained trade-offs between information loss and privacy/security concerns. In this paper, we examine anonymization solutions to date and note the above limitations in each. We further describe how FLAIM addresses these problems, and we describe FLAIM's architecture and features in detail.