MHT (IE Only)

National Center for Supercomputing Applications

•= Share for

–= Security Research

•= Create better detection tools and test them

–= Security Operations

–= Network Measurements

•= Who says its important?

–= DHS with Information Sharing and Analysis Centers

–= National Strategy to Secure Cyberspace

•= Why Netflows?

MHT (IE Only)

National Center for Supercomputing Applications

IP Anonymization Techniques

&= #8226;Black Marker Effect

= –Great information loss

= –Cannot correlate attacks against machine X

&= #8226;Truncation

= –Finer grained control of information loss =

= –Used for Source Report at ISC

&= #8226;Origins of scans

&= #8226;Random Permutations

= –Injective Mapping, a type of pseudonymization

= –Allows correlation but destroys structure

------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/slide0004.htm content-transfer-encoding: quoted-printable content-type: text/html; charset="us-ascii" MHT (IE Only)

National Center for Supercomputing Applications

Prefix-Preserving Anonymization

&= #8226;Definition

= –Let P be a permutation of the set of IP addresses

–P is a prefix-preserving anonymization function if and = only if for all IP addresses x and y:

&#= 8226;x and y match on exactly the same length prefix as P(x) and P(y)

&= #8226;Preserves subnet structures and relationships

= 226;Structure can of course be exploited by attackers

------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/slide0005.htm content-transfer-encoding: quoted-printable content-type: text/html; charset="us-ascii" MHT (IE Only)

National Center for Supercomputing Applications

Prefix Preserving Tools

&= #8226;Crypto-PAn

= –Key based solution

&= #8226;TCPdpriv

= –Table based solution for TCPdump files

&= #8226;Ip2anonip

&= #8211;A filter to anonymize IP addresses based off <= span style=3D'position:absolute;top:56.75%;left:15.54%;width:76.96%;height:5.2= 5%'>TCPdpriv

&= #8226;Ipsumdump

= –Summarizes TCP/IP dumps

–Optionally performs prefix-preserving anonymization b= ased off TCPdpriv

------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/slide0006.htm content-transfer-encoding: quoted-printable content-type: text/html; charset="us-ascii" MHT (IE Only)

National Center for Supercomputing Applications

What We Have Done

&= #8226;The problem:

= –Our visualization tools use netflows

= –We need students to work on these projects

= –Information is sensitive

= 226;Subnet structure is vital to tools. Thus Crypto-PAn is ideal.

&= #8226;No key generator in Crypto-Pan

= 226;Created a pass-phrase based key generator without extra libraries

------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/slide0007.htm content-transfer-encoding: quoted-printable content-type: text/html; charset="us-ascii" MHT (IE Only)

National Center for Supercomputing Applications

Key Generator

= –Input passphrase (unechoed), max 256 bytes

= –Wrap till buffer filled

= –CBC encrypt with fixed key

= •This combines data to create an intermediate key =

= –Why can’t we just XOR blocks?

&= #8226;Cannot stop here, processes is reversible =

&= #8211;Use the intermediate key to re-encrypt the original <= /span>buffer

&= #8226;Take the last 32 bytes as the end key

= –Even without dropping 244 bytes, this is irreversible=

------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/slide0008.htm content-transfer-encoding: quoted-printable content-type: text/html; charset="us-ascii" MHT (IE Only)

National Center for Supercomputing Applications

Performance

= •Work on binary logs

= •Avoids extra conversions

&#= 8226;On laptop still less than 20 minutes for 2 Gigabytes of flows

19.55

40113.674=

1.7 Pentium M

18.37

42686.279=

Single 2.4 Xeon<= /span>

10.45

75015.342=

Dual 2.4 Xeon

Total Time (min)=

Records/Second<= /span>

MACHINE (GHz)

------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/slide0008_image006.gif content-transfer-encoding: base64 content-type: image/gif R0lGODlhyQGSAHcAMSH+GlNvZnR3YXJlOiBNaWNyb3NvZnQgT2ZmaWNlACH5BAEAAAAALAAAAADI AZAAgAAAAAAAAAL/jI+py+0Po5y02ouz3rz7D4biSJbmiabqyrbuA8TyTNf2jef6zvf+3wsAh8Si 8YjMCZPMpvNJRECn1Opzac1qt0qu97uVgsfkJraMTvvO6rabJn7L3+y5nVy/67nxvT/8F6iVJ1iY 1GeYiESo2LjmCBl1EEn5WHnZhalZg7ipyegZCRrq2ElKOXqamKpaaNrayAr7Jzu792rrmiu6C4nb 61cLTDes+FtsJ4ycprxcduzs1hwNNk3tBX2NZq092K2X/V0tnkw+F24OmC69Lj3ZrsYNzyQ/v/hu j5f/vI+H348N4DiB2P4RzFLvYBCFYQwynJLwYSaJVNBRBBLxIieN/xAdclz08UpIJxZHTjR5JOPI kihtqAz58iPLlnBoprRpZCZOADE59tSoE+fPi0MpBrVZVGLSh0dpLmX4VGHTllEPViU4FeVVgVsB ZjXZtV/YfS/Kmj2LNq3atWxT7IzydsjYfF9XxsV490ddmHkt9d2xV+ZfHnPtBfY5GHBiHYeBLj75 GI7HyDwpu7TMaXLkwvM4w2tMFHNN0TJAGyVdGnUM00pVV1bNmqlrz+1iQ509W/Nj2ut4p7MtFTds 3Yt9mzNODrhV4aiVY2VO2jlX6KKle6WO2bpY7Ja1k+VO2Ttd8JuJJ0YuDv038YbJ7zY/WH03+drY d3ZfHP5f+tf4U/+z/xl+5+nXl3/RGOgMgLUJGB+BeSG4DITIKNgbg/s5eJeExWg4DIW/WVhgWyKO SGKJJp6I4gQgPpibAStm2CKHwMjYC427eHjci3HhmJyOb/GYno87AbmekEJhuKORSCH5o5JOMTmk k1RBKZSUWlGJlJVgYemUlitxSZWXMIGplZgykQmWmT6haRdsMarp2HAuuklnc2zyVWd0dwqWZ3V7 ItZndn/G2dybgXZnaKGHhjdoaIuWN6eikuoZaXRwEtXoaY++V2l1lxqVaWub5tdpdp8qFapsow5Y KqKrNphirLLOSmuttlZwqqp2thperlCleturF/K6ma9SARucsCGhErubsVYhu5yyD0L7nLQZUjud tTtie522P3K7nbdDgvuduEcyW5yzWJE7nrlLonueulyx2567T8Ibn7xe0XufvVPiu5++YvEboL9X AlygwGQRvKDBWyLMosNfQgyjxGNSnKTFZ2LcpMZrchylx0AxXKHImIJcpcmgopylyqiy3KXLTJH8 ocy/whymzcfiXKbOz/Kcps/r3kp00UYfjfQKBQAAOw== ------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/slide0009.htm content-transfer-encoding: quoted-printable content-type: text/html; charset="us-ascii" MHT (IE Only)

National Center for Supercomputing Applications

Conclusions & Future Work

&= #8226;Feasible solution for even large universities

= –Provides high utility, but lower security =

&= #8226;Many attacks on anonymization schemes

–Inference attacks, chosen plaintext, structure exploitation= 3;

&= #8226;Need new options to balance utility & security

= –Different levels of anonymization

&= #8226;Means considering more fields

= –Different types of logs

------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/slide0011.htm content-transfer-encoding: quoted-printable content-type: text/html; charset="us-ascii" MHT (IE Only)

National Center for Supercomputing Applications

Thank You

&= #8226;Email: slagell@ncsa.uiuc.edu

&= #8226;Links of Interest

= –http://www.ncassr.org/projects/sift/

= –http://www.ncsa.uiuc.edu/

= –http://slagellware.com/

–http://www.cc.gatech.edu/computing/Telecomm/cryptopan/

–

------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/master01.htm content-transfer-encoding: quoted-printable content-type: text/html; charset="us-ascii" MHT (IE Only)

<= span lang=3DEN-US style=3D'mso-special-format:lastCR'>

------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/master03_stylesheet.css content-transfer-encoding: base64 content-type: text/css Ym9keQ0KCXt3aWR0aDo1MzRweDsNCgloZWlnaHQ6NDAwcHg7fQ0KLlRCDQoJe21zby1zcGVjaWFs LWZvcm1hdDpub2J1bGxldFwyMDIyOw0KCWNvbG9yOmJsYWNrOw0KCWZvbnQtZmFtaWx5OlRpbWVz Ow0KCWZvbnQtc2l6ZToxMDAlO30NCi5UDQoJe3RleHQtYWxpZ246Y2VudGVyOw0KCWZvbnQtZmFt aWx5OkFyaWFsOw0KCWZvbnQtd2VpZ2h0OmJvbGQ7DQoJY29sb3I6YmxhY2s7DQoJZm9udC1zaXpl OjE1MiU7DQoJbXNvLWxpbmUtc3BhY2luZzoiMTAxIDAgMCI7DQoJbXNvLWNoYXItd3JhcDoxOw0K CW1zby1raW5zb2t1LW92ZXJmbG93OjE7fQ0KLkJCDQoJe21zby1zcGVjaWFsLWZvcm1hdDpidWxs ZXRcMjAyMjsNCgljb2xvcjojMzMzMzk5Ow0KCWZvbnQtZmFtaWx5OlRpbWVzOw0KCWZvbnQtc2l6 ZToxMDAlO30NCi5CDQoJe3RleHQtYWxpZ246bGVmdDsNCglmb250LWZhbWlseTpBcmlhbDsNCglj b2xvcjojMzMzMzk5Ow0KCWZvbnQtc2l6ZToxMzMlOw0KCW1zby1saW5lLXNwYWNpbmc6IjEwMSAt NTYgMCI7DQoJbXNvLW1hcmdpbi1sZWZ0LWFsdDoyMTU7DQoJbXNvLWNoYXItd3JhcDoxOw0KCW1z by1raW5zb2t1LW92ZXJmbG93OjE7fQ0KLkIxQg0KCXttc28tc3BlY2lhbC1mb3JtYXQ6YnVsbGV0 XDIwMTM7DQoJY29sb3I6IzMzMzM5OTsNCglmb250LWZhbWlseTpUaW1lczsNCglmb250LXNpemU6 MTAwJTt9DQouQjENCgl7dGV4dC1hbGlnbjpsZWZ0Ow0KCWZvbnQtZmFtaWx5OkFyaWFsOw0KCWNv bG9yOiMzMzMzOTk7DQoJZm9udC1zaXplOjExNCU7DQoJbXNvLWxpbmUtc3BhY2luZzoiMTAxIC00 OCAwIjsNCgltc28tbWFyZ2luLWxlZnQtYWx0OjQ2NzsNCgltc28tY2hhci13cmFwOjE7DQoJbXNv LWtpbnNva3Utb3ZlcmZsb3c6MTt9DQouQjJCDQoJe21zby1zcGVjaWFsLWZvcm1hdDpidWxsZXRc MjAyMjsNCgljb2xvcjojMzMzMzk5Ow0KCWZvbnQtZmFtaWx5OlRpbWVzOw0KCWZvbnQtc2l6ZTox MDAlO30NCi5CMg0KCXt0ZXh0LWFsaWduOmxlZnQ7DQoJZm9udC1mYW1pbHk6QXJpYWw7DQoJY29s b3I6IzMzMzM5OTsNCglmb250LXNpemU6OTUlOw0KCW1zby1saW5lLXNwYWNpbmc6IjEwMSAtNDAg MCI7DQoJbXNvLWNoYXItd3JhcDoxOw0KCW1zby1raW5zb2t1LW92ZXJmbG93OjE7fQ0KLkIzQg0K CXttc28tc3BlY2lhbC1mb3JtYXQ6YnVsbGV0XDIwMTM7DQoJY29sb3I6IzMzMzM5OTsNCglmb250 LWZhbWlseTpUaW1lczsNCglmb250LXNpemU6MTAwJTt9DQouQjMNCgl7dGV4dC1hbGlnbjpsZWZ0 Ow0KCWZvbnQtZmFtaWx5OkFyaWFsOw0KCWNvbG9yOiMzMzMzOTk7DQoJZm9udC1zaXplOjg1JTsN Cgltc28tbGluZS1zcGFjaW5nOiIxMDEgLTM2IDAiOw0KCW1zby1jaGFyLXdyYXA6MTsNCgltc28t a2luc29rdS1vdmVyZmxvdzoxO30NCi5CNEINCgl7bXNvLXNwZWNpYWwtZm9ybWF0OmJ1bGxldFww MEJCOw0KCWNvbG9yOiMzMzMzOTk7DQoJZm9udC1mYW1pbHk6VGltZXM7DQoJZm9udC1zaXplOjEw MCU7fQ0KLkI0DQoJe3RleHQtYWxpZ246bGVmdDsNCglmb250LWZhbWlseTpBcmlhbDsNCgljb2xv cjojMDA5OUNDOw0KCWZvbnQtc2l6ZTo4NSU7DQoJbXNvLWxpbmUtc3BhY2luZzoiMTAxIC0zNiAw IjsNCgltc28tY2hhci13cmFwOjE7DQoJbXNvLWtpbnNva3Utb3ZlcmZsb3c6MTt9DQouTkINCgl7 bXNvLXNwZWNpYWwtZm9ybWF0Om5vYnVsbGV0XDIwMjI7DQoJY29sb3I6YmxhY2s7DQoJZm9udC1m YW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7DQoJZm9udC1zaXplOjEwMCU7fQ0KLk4NCgl7dGV4dC1h bGlnbjpsZWZ0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWNvbG9yOmJsYWNr Ow0KCWZvbnQtc2l6ZTo1NyU7fQ0KLk4xQg0KCXttc28tc3BlY2lhbC1mb3JtYXQ6bm9idWxsZXRc MjAxMzsNCgljb2xvcjpibGFjazsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjsNCglm b250LXNpemU6MTAwJTt9DQouTjENCgl7Zm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7DQoJ Y29sb3I6YmxhY2s7DQoJbXNvLW1hcmdpbi1sZWZ0LWFsdDo0Njg7fQ0KLk4yQg0KCXttc28tc3Bl Y2lhbC1mb3JtYXQ6bm9idWxsZXRcMjAyMjsNCgljb2xvcjpibGFjazsNCglmb250LWZhbWlseToi VGltZXMgTmV3IFJvbWFuIjsNCglmb250LXNpemU6MTAwJTt9DQouTjINCgl7Zm9udC1mYW1pbHk6 IlRpbWVzIE5ldyBSb21hbiI7DQoJY29sb3I6YmxhY2s7DQoJbXNvLW1hcmdpbi1sZWZ0LWFsdDo3 MjA7fQ0KLk4zQg0KCXttc28tc3BlY2lhbC1mb3JtYXQ6bm9idWxsZXRcMjAxMzsNCgljb2xvcjpi bGFjazsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjsNCglmb250LXNpemU6MTAwJTt9 DQouTjMNCgl7Zm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7DQoJY29sb3I6YmxhY2s7DQoJ bXNvLW1hcmdpbi1sZWZ0LWFsdDoxMDA4O30NCi5ONE4NCgl7bXNvLXNwZWNpYWwtZm9ybWF0Om5v YnVsbGV0XDAwQkI7DQoJY29sb3I6YmxhY2s7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21h biI7DQoJZm9udC1zaXplOjEwMCU7fQ0KLk40DQoJe2ZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9t YW4iOw0KCWNvbG9yOmJsYWNrOw0KCW1zby1tYXJnaW4tbGVmdC1hbHQ6MTI5Njt9DQouT0INCgl7 bXNvLXNwZWNpYWwtZm9ybWF0Om5vYnVsbGV0XDIwMjI7fQ0KLk8NCgl7dGV4dC1hbGlnbjpsZWZ0 Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWNvbG9yOmJsYWNrOw0KCW1zby1j b2xvci1pbmRleDoxOw0KCWZvbnQtc2l6ZToxMTQlO30NCi5PMUINCgl7bXNvLXNwZWNpYWwtZm9y bWF0Om5vYnVsbGV0XDIwMjI7fQ0KLk8xDQoJe2ZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4i Ow0KCWZvbnQtc2l6ZToxMTQlO30NCi5PMkINCgl7bXNvLXNwZWNpYWwtZm9ybWF0Om5vYnVsbGV0 XDIwMjI7fQ0KLk8yDQoJe2ZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWZvbnQtc2l6 ZToxMTQlO30NCi5PM0INCgl7bXNvLXNwZWNpYWwtZm9ybWF0Om5vYnVsbGV0XDIwMjI7fQ0KLk8z DQoJe2ZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWZvbnQtc2l6ZToxMTQlO30NCi5P NEINCgl7bXNvLXNwZWNpYWwtZm9ybWF0Om5vYnVsbGV0XDIwMjI7fQ0KLk80DQoJe2ZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWZvbnQtc2l6ZToxMTQlO30NCi5DQkINCgl7bXNvLXNw ZWNpYWwtZm9ybWF0Om5vYnVsbGV0XDIwMjI7DQoJY29sb3I6IzMzMzM5OTsNCglmb250LWZhbWls eTpUaW1lczsNCglmb250LXNpemU6MTAwJTt9DQouQ0INCgl7Y29sb3I6IzMzMzM5OTsNCglmb250 LXNpemU6MTMzJTsNCgltc28tbGluZS1zcGFjaW5nOiIxMDEgLTU2IDAiOw0KCW1zby1jaGFyLXdy YXA6MTsNCgltc28ta2luc29rdS1vdmVyZmxvdzoxO30NCi5DQjFCDQoJe21zby1zcGVjaWFsLWZv cm1hdDpidWxsZXRcMjAxMzsNCgljb2xvcjojMzMzMzk5Ow0KCWZvbnQtZmFtaWx5OlRpbWVzOw0K CWZvbnQtc2l6ZToxMDAlO30NCi5DQjENCgl7dGV4dC1hbGlnbjpsZWZ0Ow0KCWZvbnQtZmFtaWx5 OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWNvbG9yOmJsYWNrOw0KCW1zby1jaGFyLXdyYXA6MTsNCglt c28ta2luc29rdS1vdmVyZmxvdzoxO30NCi5DQjJCDQoJe21zby1zcGVjaWFsLWZvcm1hdDpidWxs ZXRcMjAyMjsNCgljb2xvcjojMzMzMzk5Ow0KCWZvbnQtZmFtaWx5OlRpbWVzOw0KCWZvbnQtc2l6 ZToxMDAlO30NCi5DQjINCgl7dGV4dC1hbGlnbjpsZWZ0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBO ZXcgUm9tYW4iOw0KCWNvbG9yOmJsYWNrOw0KCW1zby1jaGFyLXdyYXA6MTsNCgltc28ta2luc29r dS1vdmVyZmxvdzoxO30NCi5DQjNCDQoJe21zby1zcGVjaWFsLWZvcm1hdDpidWxsZXRcMjAxMzsN Cgljb2xvcjojMzMzMzk5Ow0KCWZvbnQtZmFtaWx5OlRpbWVzOw0KCWZvbnQtc2l6ZToxMDAlO30N Ci5DQjMNCgl7dGV4dC1hbGlnbjpsZWZ0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4i Ow0KCWNvbG9yOmJsYWNrOw0KCW1zby1jaGFyLXdyYXA6MTsNCgltc28ta2luc29rdS1vdmVyZmxv dzoxO30NCi5DQjRCDQoJe21zby1zcGVjaWFsLWZvcm1hdDpidWxsZXRcMDBCQjsNCgljb2xvcjoj MDA5OUNDOw0KCWZvbnQtZmFtaWx5OlRpbWVzOw0KCWZvbnQtc2l6ZToxMDAlO30NCi5DQjQNCgl7 dGV4dC1hbGlnbjpsZWZ0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWNvbG9y OmJsYWNrOw0KCW1zby1jaGFyLXdyYXA6MTsNCgltc28ta2luc29rdS1vdmVyZmxvdzoxO30NCi5D VEINCgl7bXNvLXNwZWNpYWwtZm9ybWF0Om5vYnVsbGV0XDIwMjI7DQoJY29sb3I6YmxhY2s7DQoJ Zm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7DQoJZm9udC1zaXplOjEwMCU7fQ0KLkNUDQoJ e3RleHQtYWxpZ246bGVmdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjsNCgljb2xv cjpibGFjazsNCglmb250LXNpemU6MjA5JTsNCgltc28tY2hhci13cmFwOjE7DQoJbXNvLWtpbnNv a3Utb3ZlcmZsb3c6MTt9DQouSEJCDQoJe21zby1zcGVjaWFsLWZvcm1hdDpidWxsZXRcMjAyMjsN Cgljb2xvcjpibGFjazsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjsNCglmb250LXNp emU6MTAwJTt9DQouSEINCgl7dGV4dC1hbGlnbjpsZWZ0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBO ZXcgUm9tYW4iOw0KCWNvbG9yOmJsYWNrOw0KCWZvbnQtc2l6ZToxNTIlOw0KCW1zby1jaGFyLXdy YXA6MTsNCgltc28ta2luc29rdS1vdmVyZmxvdzoxO30NCi5IQjFCDQoJe21zby1zcGVjaWFsLWZv cm1hdDpidWxsZXRcMjAxMzsNCgljb2xvcjpibGFjazsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIjsNCglmb250LXNpemU6MTAwJTt9DQouSEIxDQoJe2ZvbnQtZmFtaWx5OiJUaW1lcyBO ZXcgUm9tYW4iOw0KCWNvbG9yOmJsYWNrOw0KCWZvbnQtc2l6ZToxMzMlOw0KCW1zby1jaGFyLXdy YXA6MTsNCgltc28ta2luc29rdS1vdmVyZmxvdzoxO30NCi5IQjJCDQoJe21zby1zcGVjaWFsLWZv cm1hdDpidWxsZXRcMjAyMjsNCgljb2xvcjpibGFjazsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIjsNCglmb250LXNpemU6MTAwJTt9DQouSEIyDQoJe3RleHQtYWxpZ246bGVmdDsNCglm b250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjsNCgljb2xvcjpibGFjazsNCglmb250LXNpemU6 MTE0JTsNCgltc28tY2hhci13cmFwOjE7DQoJbXNvLWtpbnNva3Utb3ZlcmZsb3c6MTt9DQouSEIz Qg0KCXttc28tc3BlY2lhbC1mb3JtYXQ6YnVsbGV0XDIwMTM7DQoJY29sb3I6YmxhY2s7DQoJZm9u dC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7DQoJZm9udC1zaXplOjEwMCU7fQ0KLkhCMw0KCXtm b250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjsNCgljb2xvcjpibGFjazsNCglmb250LXNpemU6 OTUlOw0KCW1zby1jaGFyLXdyYXA6MTsNCgltc28ta2luc29rdS1vdmVyZmxvdzoxO30NCi5IQjRC DQoJe21zby1zcGVjaWFsLWZvcm1hdDpidWxsZXRcMDBCQjsNCgljb2xvcjpibGFjazsNCglmb250 LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjsNCglmb250LXNpemU6MTAwJTt9DQouSEI0DQoJe2Zv bnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWNvbG9yOmJsYWNrOw0KCWZvbnQtc2l6ZTo5 NSU7DQoJbXNvLWNoYXItd3JhcDoxOw0KCW1zby1raW5zb2t1LW92ZXJmbG93OjE7fQ0KLlFCQg0K CXttc28tc3BlY2lhbC1mb3JtYXQ6YnVsbGV0XDIwMjI7DQoJY29sb3I6YmxhY2s7DQoJZm9udC1m YW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7DQoJZm9udC1zaXplOjEwMCU7fQ0KLlFCDQoJe2ZvbnQt ZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWNvbG9yOmJsYWNrOw0KCWZvbnQtc2l6ZToxNTIl Ow0KCW1zby1jaGFyLXdyYXA6MTsNCgltc28ta2luc29rdS1vdmVyZmxvdzoxO30NCi5RQjFCDQoJ e21zby1zcGVjaWFsLWZvcm1hdDpidWxsZXRcMjAxMzsNCgljb2xvcjpibGFjazsNCglmb250LWZh bWlseToiVGltZXMgTmV3IFJvbWFuIjsNCglmb250LXNpemU6MTAwJTt9DQouUUIxDQoJe2ZvbnQt ZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWNvbG9yOmJsYWNrOw0KCWZvbnQtc2l6ZToxMzMl Ow0KCW1zby1jaGFyLXdyYXA6MTsNCgltc28ta2luc29rdS1vdmVyZmxvdzoxO30NCi5RQjJCDQoJ e21zby1zcGVjaWFsLWZvcm1hdDpidWxsZXRcMjAyMjsNCgljb2xvcjpibGFjazsNCglmb250LWZh bWlseToiVGltZXMgTmV3IFJvbWFuIjsNCglmb250LXNpemU6MTAwJTt9DQouUUIyDQoJe2ZvbnQt ZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWNvbG9yOmJsYWNrOw0KCWZvbnQtc2l6ZToxMTQl Ow0KCW1zby1jaGFyLXdyYXA6MTsNCgltc28ta2luc29rdS1vdmVyZmxvdzoxO30NCi5RQjNCDQoJ e21zby1zcGVjaWFsLWZvcm1hdDpidWxsZXRcMjAxMzsNCgljb2xvcjpibGFjazsNCglmb250LWZh bWlseToiVGltZXMgTmV3IFJvbWFuIjsNCglmb250LXNpemU6MTAwJTt9DQouUUIzDQoJe2ZvbnQt ZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWNvbG9yOmJsYWNrOw0KCWZvbnQtc2l6ZTo5NSU7 DQoJbXNvLWNoYXItd3JhcDoxOw0KCW1zby1raW5zb2t1LW92ZXJmbG93OjE7fQ0KLlFCNEINCgl7 bXNvLXNwZWNpYWwtZm9ybWF0OmJ1bGxldFwwMEJCOw0KCWNvbG9yOmJsYWNrOw0KCWZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWZvbnQtc2l6ZToxMDAlO30NCi5RQjQNCgl7Zm9udC1m YW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7DQoJY29sb3I6YmxhY2s7DQoJZm9udC1zaXplOjk1JTsN Cgltc28tY2hhci13cmFwOjE7DQoJbXNvLWtpbnNva3Utb3ZlcmZsb3c6MTt9DQouVGJsQg0KCXtt c28tc3BlY2lhbC1mb3JtYXQ6bm9idWxsZXRcMjAyMjsNCgljb2xvcjojMzMzMzk5Ow0KCWZvbnQt ZmFtaWx5OlRpbWVzOw0KCWZvbnQtc2l6ZToxMDAlO30NCi5UYmwNCgl7dGV4dC1hbGlnbjpsZWZ0 Ow0KCWZvbnQtZmFtaWx5OkFyaWFsOw0KCWNvbG9yOiMzMzMzOTk7DQoJZm9udC1zaXplOjExNCU7 DQoJbXNvLWxpbmUtc3BhY2luZzoiMTAxIC01NiAwIjsNCgltc28tbWFyZ2luLWxlZnQtYWx0OjIx NTsNCgltc28tY2hhci13cmFwOjE7DQoJbXNvLWtpbnNva3Utb3ZlcmZsb3c6MTt9DQouVGJsMUIN Cgl7bXNvLXNwZWNpYWwtZm9ybWF0Om5vYnVsbGV0XDIwMTM7DQoJY29sb3I6IzMzMzM5OTsNCglm b250LWZhbWlseTpUaW1lczsNCglmb250LXNpemU6MTAwJTt9DQouVGJsMQ0KCXtjb2xvcjojMzMz Mzk5Ow0KCWZvbnQtc2l6ZTo5NSU7DQoJbXNvLWxpbmUtc3BhY2luZzoiMTAxIC00OCAwIjsNCglt c28tbWFyZ2luLWxlZnQtYWx0OjQ2NzsNCgltc28tY2hhci13cmFwOjE7DQoJbXNvLWtpbnNva3Ut b3ZlcmZsb3c6MTt9DQouVGJsMkINCgl7bXNvLXNwZWNpYWwtZm9ybWF0Om5vYnVsbGV0XDIwMjI7 DQoJY29sb3I6IzMzMzM5OTsNCglmb250LWZhbWlseTpUaW1lczsNCglmb250LXNpemU6MTAwJTt9 DQouVGJsMg0KCXtjb2xvcjojMzMzMzk5Ow0KCWZvbnQtc2l6ZTo4NSU7DQoJbXNvLWxpbmUtc3Bh Y2luZzoiMTAxIC00MCAwIjsNCgltc28tY2hhci13cmFwOjE7DQoJbXNvLWtpbnNva3Utb3ZlcmZs b3c6MTt9DQouVGJsM0INCgl7bXNvLXNwZWNpYWwtZm9ybWF0Om5vYnVsbGV0XDIwMTM7DQoJY29s b3I6IzMzMzM5OTsNCglmb250LWZhbWlseTpUaW1lczsNCglmb250LXNpemU6MTAwJTt9DQouVGJs Mw0KCXtjb2xvcjojMzMzMzk5Ow0KCWZvbnQtc2l6ZTo3NiU7DQoJbXNvLWxpbmUtc3BhY2luZzoi MTAxIC0zNiAwIjsNCgltc28tY2hhci13cmFwOjE7DQoJbXNvLWtpbnNva3Utb3ZlcmZsb3c6MTt9 DQouVGJsNEINCgl7bXNvLXNwZWNpYWwtZm9ybWF0Om5vYnVsbGV0XDAwQkI7DQoJY29sb3I6IzMz MzM5OTsNCglmb250LWZhbWlseTpUaW1lczsNCglmb250LXNpemU6MTAwJTt9DQouVGJsNA0KCXtj b2xvcjojMDA5OUNDOw0KCWZvbnQtc2l6ZTo3NiU7DQoJbXNvLWxpbmUtc3BhY2luZzoiMTAxIC0z NiAwIjsNCgltc28tY2hhci13cmFwOjE7DQoJbXNvLWtpbnNva3Utb3ZlcmZsb3c6MTt9DQouZGVm YXVsdEINCgl7bXNvLXNwZWNpYWwtZm9ybWF0Om5vYnVsbGV0XDIwMjI7fQ0KLmRlZmF1bHQNCgl7 dGV4dC1hbGlnbjpsZWZ0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWZvbnQt d2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDsNCgl0ZXh0LWRlY29yYXRpb246bm9u ZTsNCgl0ZXh0LXNoYWRvdzpub25lOw0KCXRleHQtZWZmZWN0Om5vbmU7DQoJbXNvLWZhcmVhc3Qt aGludDpubzsNCglsYXlvdXQtZmxvdzpob3Jpem9udGFsOw0KCWNvbG9yOndoaXRlOw0KCW1zby1j b2xvci1pbmRleDowOw0KCWZvbnQtc2l6ZToxMTQlOw0KCW1zby10ZXh0LXJhaXNlOjAlOw0KCW1z by1saW5lLXNwYWNpbmc6IjEwMCAwIDAiOw0KCW1zby1tYXJnaW4tbGVmdC1hbHQ6MDsNCgltc28t dGV4dC1pbmRlbnQtYWx0OjA7DQoJbXNvLWNoYXItd3JhcDowOw0KCW1zby1raW5zb2t1LW92ZXJm bG93OjA7DQoJZGlyZWN0aW9uOmx0cjsNCgltc28td29yZC13cmFwOjE7DQoJbXNvLXZlcnRpY2Fs LWFsaWduLXNwZWNpYWw6YmFzZWxpbmU7DQoJbXNvLWFuc2ktbGFuZ3VhZ2U6RU4tR0I7fQ0KYTps aW5rDQoJe2NvbG9yOiNDQ0NDRkYgIWltcG9ydGFudDt9DQphOmFjdGl2ZQ0KCXtjb2xvcjojMzMz M0NDICFpbXBvcnRhbnQ7fQ0KYTp2aXNpdGVkDQoJe2NvbG9yOiNCMkIyQjIgIWltcG9ydGFudDt9 DQp= ------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/script.js content-transfer-encoding: quoted-printable content-type: application/javascript; charset="us-ascii" function LoadSld() { var sld=3DGetObj("SlideObj") if( !g_supportsPPTHTML ) { =09 sld.style.visibility=3D"visible" return } if( MakeNotesVis() ) return runAnimations =3D _InitAnimations(); =09 if( IsWin("PPTSld") ) parent.SldUpdated(GetSldId()) g_origSz=3DparseInt(SlideObj.style.fontSize) g_origH=3Dsld.style.posHeight g_origW=3Dsld.style.posWidth g_scaleHyperlinks=3D(document.all.tags("AREA").length>0) if( g_scaleHyperlinks ) InitHLinkArray() if( g_scaleInFrame||(IsWin("PPTSld") && parent.IsFullScrMode() ) ) document.body.scroll=3D"no" _RSW() if( IsWin("PPTSld") && parent.IsFullScrMode() ) FullScrInit(); =09 MakeSldVis(); ChkAutoAdv() if( runAnimations ) { if( document.all("NSPlay") ) document.all("NSPlay").autoStart =3D false; if( sld.filters && sld.filters.revealtrans ) setTimeout( "document.body.start()", sld.filters.revealtrans.duration * = 1000 ); else document.body.start(); } } function MakeSldVis()=20 { var fTrans=3Dg_showAnimation && SldHasTrans() if( fTrans )=09 { if( g_bgSound ) { idx=3Dg_bgSound.indexOf(","); pptSound.src=3Dg_bgSound.substr( 0, idx ); pptSound.loop=3D -(parseInt(g_bgSound.substr(idx+1))); } SlideObj.filters.revealtrans.Apply()=09 } SlideObj.style.visibility=3D"visible" if( fTrans ) SlideObj.filters.revealtrans.Play() } function MakeNotesVis()=20 { if( !IsNts() ) return false=20 SlideObj.style.display=3D"none" nObj =3D document.all.item("NotesObj") parent.SetHasNts(0) if( nObj ) {=20 nObj.style.display=3D"" parent.SetHasNts(1) } return 1 } function ChkAutoAdv() { if(SldHasTrans()) SlideObj.onfilterchange=3DAutoAdv else AutoAdv() } function AutoAdv() { if(!IsWin("PPTSld") || !gUseSldTimings )return var sld=3DGetCurSld() if( (sld.mAdvDelay>0) && !parent.IsFramesMode() ) setTimeout("parent.GoToNextSld()",sld.mAdvDelay) } function GetObj(id) { if(g_supportsPPTHTML) return document.all(id); else return document.getElementById(id); } function SldHasTrans() { return SlideObj.style.filter !=3D ""; } function GetSldId() { return sId=3Dlocation.href.substring(location.href.la= stIndexOf('/')+1) } function HideMenu() { if( frames["PPTSld"] && PPTSld.document.all.item("ctx= tmenu") && PPTSld.ctxtmenu.style.display!=3D"none" ) { PPTSld.ctxtmenu.styl= e.display=3D'none'; return true } return false } function IsWin( name ) { return window.name =3D=3D name } function IsNts() { return IsWin("PPTNts") } function IsSldOrNts() { return( IsWin("PPTSld")||IsWin("PPTNts") ) } function SupportsPPTAnimation() { return( navigator.platform =3D=3D "Win32"= && navigator.appVersion.indexOf("Windows")>0 ) } function SupportsPPTHTML() { var appVer=3Dnavigator.appVersion, msie=3DappVer.indexOf("MSIE "), ver=3D0 if( msie >=3D 0 ) ver=3DparseFloat( appVer.substring( msie+5, appVer.indexOf(";",msie) ) ) else ver=3DparseInt(appVer) return( ver >=3D 4 && msie >=3D 0 ) } function _RSW() { if( !g_supportsPPTHTML || IsNts() || ( !g_scaleInFrame && (!IsWin("PPTSld") || !parent.IsFullScrMode()) ) ) return var padding=3D0; if( IsWin("PPTSld") && parent.IsFramesMode() ) padding=3D6 cltWidth=3Ddocument.body.clientWidth-padding cltHeight=3Ddocument.body.clientHeight-padding factor=3D(1.0*cltWidth)/g_origW if( cltHeight < g_origH*factor ) factor=3D(1.0*cltHeight)/g_origH newSize =3D g_origSz * factor if( newSize < 1 ) newSize=3D1 s=3DSlideObj.style s.fontSize=3DnewSize+"px" s.posWidth=3Dg_origW*factor s.posHeight=3Dg_origH*factor s.posLeft=3D(cltWidth-s.posWidth+padding)/2 s.posTop=3D(cltHeight-s.posHeight+padding)/2 if( g_scaleHyperlinks ) ScaleHyperlinks( factor ) } function _InitAnimations() { animRuntimeInstalled =3D ''+document.body.localTime !=3D 'undefined'; isFullScreen =3D (window.name =3D=3D "PPTSld") && !parent.IsFramesMode(); g_animUseRuntime =3D g_showAnimation && animRuntimeInstalled && !(isFullSc= reen && parent.IsSldVisited()); if( g_animUseRuntime ) { collSeq =3D document.all.tags("seq"); if( collSeq !=3D null ) { for(ii=3D0;ii numSlds ) gSldJumpIdx =3D numSlds; if ( gSldJumpIdx >=3D 0 ) { if ( gSldJumpIdx =3D=3D 0 ) gSldJumpIdx =3D 1; var jumpTo =3D parseInt(gSldJumpIdx); gSldJump =3D 0; gSldJumpIdx =3D ""; win.GoToSld( parent.GetSldList().mList[jumpTo-1].mSldHref ) } } } function _KDH() { if( event.keyCode =3D=3D 8 ) { event.returnValue =3D 0; parent.GoToPrevSld(); } } function DocumentOnClick() { if( IsNts() || parent.HideMenu() ) return; if( ( g_allowAdvOnClick && !parent.IsFramesMode() ) || (event && (event.keyCode=3D=3D32) ) ) parent.GoToNextSld(); } var g_supportsPPTHTML =3D SupportsPPTHTML(), g_scaleInFrame =3D 1, gId=3D""= , g_bgSound=3D"", g_scaleHyperlinks =3D false, g_allowAdvOnClick =3D 1, g_showInBrowser = =3D 0, gLoopCont =3D 0, gUseSldTimings =3D 0; var g_showAnimation =3D g_supportsPPTHTML && SupportsPPTAnimation() && ( (w= indow.name=3D=3D"PPTSld" && !parent.IsFramesMode()) || g_showInBrowser );va= r g_animManager =3D null; var g_animUseRuntime =3D false; var g_animItemsToHide, g_animInteractiveItems, g_animSlideTime; var g_animMainSequence =3D null; var ENDSHOW_MESG=3D"End of slide show, click to exit.", SCREEN_MODE=3D"Fram= es", gIsEndShow=3D0, NUM_VIS_SLDS=3D10, SCRIPT_HREF=3D"script.js", FULLSCR_= HREF=3D"fullscreen.htm"; var gCurSld =3D gPrevSld =3D 1, g_offset =3D 0, gNtsOpen =3D gHasNts =3D gO= tlTxtExp =3D 0, gHasNarration =3D 0, gOtlOpen =3D true window.gPPTHTML=3DSupportsPPTHTML() var gMainDoc=3Dnew Array(new hrefList("slide0001.htm",1,-1,1),new hrefList(= "slide0002.htm",1,-1,1),new hrefList("slide0003.htm",1,-1,1),new hrefList("= slide0004.htm",1,-1,1),new hrefList("slide0005.htm",1,-1,1),new hrefList("s= lide0006.htm",1,-1,1),new hrefList("slide0007.htm",1,-1,1),new hrefList("sl= ide0008.htm",1,-1,1),new hrefList("slide0009.htm",1,-1,1),new hrefList("sli= de0011.htm",1,-1,1)); /********************************************* Frameset functions These functions control slide navigation and state of the frameset. **********************************************/ function FullScrInit() { g_allowAdvOnClick =3D GetCurSld().mAdvOnClk document.body.style.backgroundColor=3D"black" document.oncontextmenu=3Dparent._CM; document.onkeydown =3D _KDH; document.ondragstart=3DCancel document.onselectstart=3DCancel self.focus() } function Redirect( frmId ) {=09 var str=3Ddocument.location.hash,idx=3Dstr.indexOf('#'), sId=3DGetSldId() if(idx>=3D0) str=3Dstr.substr(1); if( window.name !=3D frmId && ( sId !=3D str) ) { obj =3D GetObj("Main-File") window.location.href=3Dobj.href+"#"+sId return 1 } return 0 } var MHTMLPrefix =3D CalculateMHTMLPrefix();=20 function CalculateMHTMLPrefix() { if ( document.location.protocol =3D=3D 'mhtml:') {=20 href=3Dnew String(document.location.href)=20 Start=3Dhref.indexOf('!')+1=20 End=3Dhref.lastIndexOf('/')+1=20 if (End < Start)=20 return href.substring(0, Start)=20 else=20 return href.substring(0, End)=20 } return ''; } function GetTags(base,tag) { if(g_supportsPPTHTML) return base.all.tags(tag); else return base.getElementsByTagName(tag); } function UpdNtsPane(){ if(frames["PPTNts"]) PPTNts.location.replace( MHTMLP= refix+GetHrefObj( gCurSld ).mNtsHref ) } function UpdNavPane( sldIndex ){ if(gNavLoaded) PPTNav.UpdNav() } function UpdOtNavPane(){ if(gOtlNavLoaded) PPTOtlNav.UpdOtlNav() } function UpdOtlPane(){ if(gOtlLoaded) PPTOtl.UpdOtl() } function SetHasNts( fVal ) { if( gHasNts !=3D fVal ) { gHasNts=3DfVal UpdNavPane() } } function ToggleOtlText() { gOtlTxtExp=3D!gOtlTxtExp UpdOtlPane() } function ClearMedia() { // Clear any sounds playing before launching another browser window. Other= wise, // in fullscreen mode, you'll continue to hear the sound in the frames mod= e. if (PPTSld.pptSound) PPTSld.pptSound.loop =3D 0; } function FullScreen() {=20 if ( PPTSld.g_animUseRuntime ) PPTSld.document.body.pause(); ClearMedia(); var href =3D ( document.location.protocol =3D=3D 'mhtml:') ? FULLSCR_HREF = : FULLSCR_HREF+"#"+GetHrefObj(gCurSld).mSldHref; if(PPTNav.event.ctrlKey) { var w =3D (window.screen.availWidth * 1.0) / 2.0 var h =3D w * (PPTSld.g_origH * 1.0) / PPTSld.g_origW win =3D window.open( MHTMLPrefix+href,null,"toolbar=3D0,resizable=3D1,top= =3D0,left=3D0," + "width=3D"+ w + ",height=3D" + h ); if( win.document.body && PPTSld.g_animUseRuntime ) win.document.body.PPTSldFrameset=3Dwindow; } else { win =3D window.open( MHTMLPrefix+href,null,"fullscreen=3Dyes" ); if( win.document.body && PPTSld.g_animUseRuntime ) win.document.body.PPTSldFrameset=3Dwindow; } } function ToggleVNarration() { rObj=3DPPTSld.document.all("NSPlay") if( rObj && !PPTSld.g_animUseRuntime ) { if( (rObj.playState =3D=3D 1)||(rObj.playState =3D=3D 0) ) rObj.Play() else if( rObj.playState =3D=3D 2 ) rObj.Pause() else return; } else if( PPTSld.g_animUseRuntime ) { narObj =3D PPTSld.document.all("narrationID") if( narObj ) narObj.togglePause() } } function GetCurSldNum() { =20 obj=3DGetHrefObj(gCurSld) if( obj.mOrigVis =3D=3D 1 ) return obj.mSldIdx else =20 return gCurSld } function GetNumSlds() { =20 if( GetHrefObj(gCurSld).mOrigVis =3D=3D 1 ) return GetSldList().mNumVisSlds; else return GetSldList().mList.length } function GetSldNum( href ) { for(ii=3D0; ii 1 ) PopSldList(); else if( !IsFramesMode() ) { if( gLoopCont ) GoToFirst() else EndShow() } } function GoToPrevSld() { ii=3DgCurSld-1 if( ii > 0 ) { obj=3DGetHrefObj(ii) while ( obj && ( obj.mVis =3D=3D 0 ) && ( ii>0 ) ) obj=3DGetHrefObj(--ii) if( ii =3D=3D 0 ) ii=3D1 GoToSldNum(ii) } } function GoToFirst(){ GoToSld( GetHrefObj(1).mSldHref ) } function GoToLast() { ii=3DGetSldList().mList.length if( ii !=3D gCurSld ) GoToSld( GetHrefObj(ii).mSldHref ) } function GoToSldNum( num ) { if( PPTSld.event ) PPTSld.event.cancelBubble=3Dtrue obj =3D GetHrefObj( num ) obj.mVis=3D1 gPrevSld=3DgCurSld gCurSld =3D num; PPTSld.location.replace(MHTMLPrefix+obj.mSldHref) if( IsFramesMode() ) { UpdNavPane(); UpdOtlPane(); UpdNtsPane() } } function GoToSld( href ) { if( PPTSld.event ) PPTSld.event.cancelBubble=3Dtrue GetHrefObj( GetSldNum(href) ).mVis=3D1 PPTSld.location.replace(MHTMLPrefix+href) } function SldUpdated( id ) { if( id =3D=3D GetHrefObj(gCurSld).mSldHref ) return gPrevSld=3DgCurSld gCurSld=3DGetSldNum(id) if( IsFramesMode() ) { UpdNavPane(); UpdOtlPane(); UpdNtsPane() } } function PrevSldViewed(){ GoToSld( GetHrefObj(gPrevSld).mSldHref ) } function HasPrevSld() { return ( gIsEndShow || ( gCurSld !=3D 1 && GetHrefO= bj( gCurSld-1 ).mVis =3D=3D 1 )||( GetCurSldNum() > 1 ) ) } function HasNextSld() { return (GetCurSldNum() !=3D GetNumSlds()) } function CloseWindow() { if( HideMenu() ) return; =09 var event =3D PPTSld.event; if( !IsFramesMode() && event && (event.keyCode=3D=3D27 || event.keyCode=3D= =3D32 || event.type=3D=3D"click" ) ) window.close( self ); CatchNumKeys( self, event ); } function Unload() { gIsEndShow=3D0; } function SetupEndShow() { gIsEndShow=3D1; PPTSld.document.body.scroll=3D"no"; PPTSld.document.onkeypress=3DCloseWindow; PPTSld.document.onclick=3DCloseWindow; PPTSld.document.oncontextmenu=3D_CM; } function EndShow() { if( IsFramesMode() ) return if( PPTSld.event ) PPTSld.event.cancelBubble=3Dtrue doc=3DPPTSld.document var dir =3D doc.body.dir if( dir !=3D "rtl" ) dir =3D "ltr"; doc.open() doc.writeln('

' + ENDSHOW_MESG + '

') doc.close() } function SetSldVisited(){ GetSldList().mList[gCurSld-1].mVisited=3Dtrue } function IsSldVisited(){ return GetSldList().mList[gCurSld-1].mVisited } function hrefList( sldHref, visible, advDelay, advClk ) { this.mSldHref=3D this.mNtsHref =3D sldHref this.mOrigVis=3D this.mVis =3D visible this.mVisited=3D false this.mAdvDelay=3D advDelay this.mAdvOnClk=3D advClk } function SldList(arr,curSld,fEnd) { this.mCurSld =3D curSld; this.mList =3D new Array(); var idx =3D 1; for(ii=3D0;ii 0) { PushSldList(sldList,fEnd); gCurSld =3D 1; } else if( PPTSld.event ) PPTSld.event.cancelBubble=3Dtrue } function PushSldList(arr,fEnd) { var ii =3D gSldStack.length; gSldStack[ii] =3D new SldList(arr,gCurSld,fEnd); GoToSld( gSldStack[ii].mList[0].mSldHref ); } function PopSldList() { if (gSldStack[gSldStack.length-1].fEndShow) EndShow() else { gCurSld =3D gSldStack[gSldStack.length-1].mCurSld; gSldStack[gSldStack.length-1] =3D null; gSldStack.length--; var sldList =3D gSldStack[gSldStack.length-1]; GoToSld( sldList.mList[gCurSld - 1].mSldHref ); } } var custShowList=3Dnew Array(); /********************************************* Navigation button implementation There are 2 types of buttons: ImgBtn, TxtBtn implemented as function objects. They share a similiar interface so the event handlers can call SetActive, for example, on a button=20 object without needing to know exactly=20 what type of button it is. **********************************************/ //---------------------------------- function ImgBtn( oId,bId,w,action ) //---------------------------------- { var t=3Dthis t.Perform =3D _IBP t.SetActive =3D _IBSetA t.SetInactive=3D _IBSetI t.SetPressed =3D _IBSetP t.SetDisabled=3D _IBSetD t.Enabled =3D _IBSetE t.ChangeIcon =3D null t.UserAction =3D action t.ChgState =3D _IBUI t.mObjId =3D oId t.mBorderId=3D bId t.mWidth =3D w t.mIsOn =3D t.mCurState =3D 0 } function _IBSetA() { if( this.mIsOn ) { obj=3Dthis.ChgState( gHiliteClr,gShadowClr,2 ) obj.style.posTop=3D0 } } function _IBSetI() { if( this.mIsOn ) { obj=3Dthis.ChgState( gFaceClr,gFaceClr,1 ) obj.style.posTop=3D0=20 } } function _IBSetP() { if( this.mIsOn ) { obj=3Dthis.ChgState( gShadowClr,gHiliteClr,2 ) obj.style.posLeft+=3D1; obj.style.posTop+=3D1 } } function _IBSetD() { =20 obj=3Dthis.ChgState( gFaceClr,gFaceClr,0 ) obj.style.posTop=3D0=20 } function _IBSetE( state ) { var t=3Dthis GetObj( t.mBorderId ).style.visibility=3D"visible" if( state !=3D t.mIsOn ) { t.mIsOn=3Dstate if( state ) t.SetInactive() else t.SetDisabled() } } function _IBP() { var t=3Dthis if( t.mIsOn ) { if( t.UserAction !=3D null ) t.UserAction() if( t.ChangeIcon ) { obj=3DGetObj(t.mObjId) if( t.ChangeIcon() ) obj.style.posLeft=3Dobj.style.posLeft+(t.mCurState-4)*t.mWidth else obj.style.posLeft=3Dobj.style.posLeft+(t.mCurState-0)*t.mWidth } t.SetActive() } =20 } function _IBUI( clr1,clr2,nextState ) { var t=3Dthis SetBorder( GetObj( t.mBorderId ),clr1,clr2 ) obj=3DGetObj( t.mObjId ) obj.style.posLeft=3Dobj.style.posLeft+(t.mCurState-nextState)*t.mWidth-obj= .style.posTop t.mCurState=3DnextState return obj } //----------------------------------------- function TxtBtn( oId,oeId,action,chkState ) //----------------------------------------- { var t=3Dthis t.Perform =3D _TBP t.SetActive =3D _TBSetA t.SetInactive=3D _TBSetI t.SetPressed =3D _TBSetP t.SetDisabled=3D _TBSetD t.SetEnabled =3D _TBSetE t.GetState =3D chkState t.UserAction =3D action t.ChgState =3D _TBUI t.mObjId =3D oId t.m_elementsId=3D oeId t.mIsOn =3D 1 } function _TBSetA() { var t=3Dthis if( t.mIsOn && !t.GetState() ) t.ChgState( gHiliteClr,gShadowClr,0,0 ) } function _TBSetI() { var t=3Dthis if( t.mIsOn && !t.GetState() ) t.ChgState( gFaceClr,gFaceClr,0,0 ) } function _TBSetP() { if( this.mIsOn ) this.ChgState( gShadowClr,gHiliteClr,1,1 ) } function _TBSetD() { =20 this.ChgState( gFaceClr,gFaceClr,0,0 ) this.mIsOn =3D 0 } function _TBSetE() { var t=3Dthis if( !t.GetState() ) t.ChgState( gFaceClr,gFaceClr,0,0 ) else t.ChgState( gShadowClr,gHiliteClr,1,1 ) t.mIsOn =3D 1 } function _TBP() { var t=3Dthis if( t.mIsOn ) {=20 if( t.UserAction !=3D null ) t.UserAction() if( !t.GetState ) return if( t.GetState() ) t.SetPressed() else t.SetActive() } =20 } function _TBUI( clr1,clr2,lOffset,tOffset ) { SetBorder( GetObj( this.mObjId ),clr1,clr2 ) Offset( GetObj( this.m_elementsId ),lOffset,tOffset ) } function Offset( obj, top, left ){ obj.style.top=3Dtop; obj.style.left=3Dle= ft } function SetBorder( obj, upperLeft, lowerRight ) { s=3Dobj.style; s.borderStyle =3D "solid" s.borderWidth =3D 1=20 s.borderLeftColor =3D s.borderTopColor =3D upperLeft s.borderBottomColor=3D s.borderRightColor =3D lowerRight } function GetBtnObj(){ return gBtnArr[window.event.srcElement.id] } function BtnOnOver(){ b=3DGetBtnObj(); if( b !=3D null ) b.SetActive() } function BtnOnDown(){ b=3DGetBtnObj(); if( b !=3D null ) b.SetPressed() } function BtnOnOut(){ b=3DGetBtnObj(); if( b !=3D null ) b.SetInactive() } function BtnOnUp() { b=3DGetBtnObj() if( b !=3D null ) b.Perform() else Upd() } function GetNtsState(){ return parent.gNtsOpen } function GetOtlState(){ return parent.gOtlOpen } function GetOtlTxtState(){ return parent.gOtlTxtExp } function NtsBtnSetFlag( fVal ) { s=3Ddocument.all.item( this.m_flagId ).style s.display=3D"none" if( fVal ) s.display=3D"" else s.display=3D"none" } function _BSetA_Border(){ b =3D gBtnArr[this.mObjId]; if( b !=3D null ) b.S= etActive() } function _BSetI_Border(){ b =3D gBtnArr[this.mObjId]; if( b !=3D null ) b.S= etInactive() } function _BSetP_Border(){ b =3D gBtnArr[this.mObjId]; if( b !=3D null ) b.S= etPressed() } function _BSetA_BorderImg() {=20 b =3D gBtnArr[this.mBorderId]=20 if( b !=3D null && this.mIsOn && !b.GetState() ) { obj=3Dthis.ChgState( gHiliteClr,gShadowClr,2 ) obj.style.posTop=3D0 } } function _BSetI_BorderImg() {=20 b =3D gBtnArr[this.mBorderId] if( b !=3D null && this.mIsOn && !b.GetState() ) { obj=3Dthis.ChgState( gFaceClr,gFaceClr,1 ) obj.style.posTop=3D0 } } var gHiliteClr=3D"THREEDHIGHLIGHT",gShadowClr=3D"THREEDSHADOW",gFaceClr=3D"= THREEDFACE" var gBtnArr =3D new Array() gBtnArr["nb_otl"] =3D new TxtBtn( "nb_otl","nb_otlElem",parent.ToggleOtlPan= e,GetOtlState ) gBtnArr["nb_otlElem"] =3D new TxtBtn( "nb_otl","nb_otlElem",parent.ToggleOt= lPane,GetOtlState ) gBtnArr["nb_nts"] =3D new ImgBtn( "nb_nts","nb_ntsBorder",10,parent.ToggleN= tsPane ) gBtnArr["nb_nts"].SetActive =3D _BSetA_BorderImg; gBtnArr["nb_nts"].SetInactive =3D _BSetI_BorderImg; gBtnArr["nb_ntsBorder"] =3D new TxtBtn( "nb_ntsBorder","nb_ntsElem",parent.= ToggleNtsPane,GetNtsState ) gBtnArr["nb_ntsElem"] =3D new TxtBtn( "nb_ntsBorder","nb_ntsElem",parent.To= ggleNtsPane,GetNtsState ) gBtnArr["nb_prevBorder"] =3D gBtnArr["nb_prev"]=3D new ImgBtn( "nb_prev","n= b_prevBorder",30,parent.GoToPrevSld ) gBtnArr["nb_nextBorder"] =3D gBtnArr["nb_next"]=3D new ImgBtn( "nb_next","n= b_nextBorder",30,parent.GoToNextSld ) gBtnArr["nb_sldshw"]=3D new ImgBtn( "nb_sldshw","nb_sldshwBorder",18,parent= .FullScreen ) gBtnArr["nb_sldshwBorder"] =3D new TxtBtn( "nb_sldshw","nb_sldshwBorder",pa= rent.FullScreen,null ) gBtnArr["nb_sldshwBorder"].SetActive =3D _BSetA_Border; gBtnArr["nb_sldshwBorder"].SetInactive =3D _BSetI_Border; gBtnArr["nb_sldshwText"] =3D new TxtBtn( "nb_sldshw","nb_sldshwText",parent= .FullScreen,null ) gBtnArr["nb_sldshwText"].SetActive =3D _BSetA_Border; gBtnArr["nb_sldshwText"].SetInactive =3D _BSetI_Border; gBtnArr["nb_voice"] =3D gBtnArr["nb_voiceBorder"] =3D new ImgBtn( "nb_voice= ","nb_voiceBorder",18,parent.ToggleVNarration ) gBtnArr["nb_otlTxtBorder"] =3D gBtnArr["nb_otlTxt"]=3D new ImgBtn( "nb_otlT= xt","nb_otlTxtBorder",23,parent.ToggleOtlText ) gBtnArr["nb_ntsBorder"].m_flagId=3D "nb_nts" gBtnArr["nb_ntsBorder"].SetFlag =3D NtsBtnSetFlag gBtnArr["nb_otlTxt"].ChangeIcon=3D GetOtlTxtState /********************************************* Context menu implementation _CM() is the function that's hooked up to the oncontextmenu event. Once we're asked to show the menu, we first build it by creating DIVs on-the-fly. Then we position it=20 within the screen area so it doesn't get clipped. Creating the DIVs using createElement() means we don't have to write out any extra HTML into the slide HTML files. **********************************************/ var sNext=3D"Next",sPrev=3D"Previous",sEnd=3D"End Show",sFont=3D"Arial",sAr= row=3D"Arrow",sFreeform=3D"Freeform",sRect=3D"Rectangle",sOval=3D"Oval" function ShowMenu() { BuildMenu(); var doc=3DPPTSld.document.body,x=3DPPTSld.event.clientX+doc.scrollLeft,y= =3DPPTSld.event.clientY+doc.scrollTop m =3D PPTSld.document.all.item("ctxtmenu") m.style.pixelLeft=3Dx if( (x+m.scrollWidth > doc.clientWidth)&&(x-m.scrollWidth > 0) ) m.style.pixelLeft=3Dx-m.scrollWidth m.style.pixelTop=3Dy if( (y+m.scrollHeight > doc.clientHeight)&&(y-m.scrollHeight > 0) ) m.style.pixelTop=3Dy-m.scrollHeight m.style.display=3D"" } function _CM() { if( !parent.IsFullScrMode() ) return; if(!PPTSld.event.ctrlKey) { ShowMenu() return false } else HideMenu() } function BuildMenu() { if( PPTSld.document.all.item("ctxtmenu") ) return var mObj=3DCreateItem( PPTSld.document.body ) mObj.id=3D"ctxtmenu" mObj.style.visibility=3D"hidden" var s=3DmObj.style s.position=3D"absolute" s.cursor=3D"default" s.width=3D"120px" SetCMBorder(mObj,"menu","black") var iObj=3DCreateItem( mObj ) SetCMBorder( iObj, "threedhighlight","threedshadow" ) iObj.style.padding=3D2 CreateMenuItem( iObj,sNext,M_GoNextSld,M_True ) CreateMenuItem( iObj,sPrev,M_GoPrevSld,M_HasPrevSld ) =09 CreateSeparator( iObj ) CreateMenuItem( iObj,sEnd,M_End,M_True ) mObj.style.visibility=3D"visible" } function Cancel() { window.event.cancelBubble=3Dtrue; window.event.returnVa= lue=3Dfalse } function Highlight() { ChangeClr("activecaption","threedhighlight") } function Deselect() { ChangeClr("threedface","menutext") } function Perform() { e=3DPPTSld.event.srcElement if( e.type=3D=3D"menuitem" && e.IsActive() ) e.Action() else PPTSld.event.cancelBubble=3Dtrue } function ChangeClr( bg,clr ) { e=3DPPTSld.event.srcElement if( e.type=3D=3D"menuitem" && e.IsActive() ) { e.style.backgroundColor=3Dbg e.style.color=3Dclr } } function M_HasPrevSld() { return( parent.HasPrevSld() ) } function M_GoNextSld() { if( gIsEndShow ) M_End(); else GoToNextSld() } function M_GoPrevSld() { if( gIsEndShow ) { gIsEndShow=3D0; history.back();= PPTSld.event.cancelBubble=3Dtrue; } else GoToPrevSld() } function M_True() { return true } function M_End() { window.close( self ) } function CreateMenuItem( node,text,action,eval ) { var e=3DCreateItem( node ) e.type=3D"menuitem" e.Action=3Daction e.IsActive=3Deval e.innerHTML=3Dtext if( !e.IsActive() ) e.style.color=3D"threedshadow" e.onclick=3DPerform e.onmouseover=3DHighlight e.onmouseout=3DDeselect s=3De.style; s.fontFamily=3DsFont s.fontSize=3D"9pt" s.paddingLeft=3D2 } function CreateSeparator( node ) { var sObj=3DCreateItem( node ) SetCMBorder(sObj,"menu","menu") var s=3DsObj.style s.borderTopColor=3D"threedshadow" s.borderBottomColor=3D"threedhighlight" s.height=3D1 s.fontSize=3D"0px" } function CreateItem( node ) { var elem=3DPPTSld.document.createElement("DIV") node.insertBefore( elem ) return elem } function SetCMBorder( o,ltClr,rbClr ) { var s=3Do.style s.backgroundColor=3D"menu" s.borderStyle=3D"solid" s.borderWidth=3D1 s.borderColor=3DltClr+" "+rbClr+" "+rbClr+" "+ltClr } ------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/fullscreen.htm content-transfer-encoding: quoted-printable content-type: text/html; charset="us-ascii" MHT (IE Only) ------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/buttons.gif content-transfer-encoding: base64 content-type: image/gif R0lGODlhWAESAPf4AAAAAIAAAACAAICAAAAAgIAAgACAgICAgAQEBISEBASEBISEhAQEhMTExAQE /KTM9Pz8/ERERPz8BAT8/KSkpGRkhMTcxCRkxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAMDAwP8AAAD/AP//AAAA//8A/wD//////yH5BAEAAPgALAAAAABYARIA QAj/APEJHEiwoMGDCBMqXMiwocOHECNKnEixosWLGCEiQKCRo8YDIEHig2DxAD4LKD1avDDhgUuV GUOGbHBR5QGYFBG4fHAB58EKECJEwCfUYAWPFGAygLCRKQIIUKM6WAohKUGgCikcFWh1INWoYKVS 7SrQ41GbIhGYLAuVQVOoC+IyXUuUAkG1HE3KFDhAwkgJc5/qDZmxsOHDiBMrXsy4sePDGyP7lChT 5MULmDPnlDw5YmW6FTNrfgi0aNGEZPEtbfo2bNTUpYeeRph69dPWrqvCNFuBIGG1A59CYPAVQtwF cw0OxWdTIOiBCQAjaAB17fOFII8voGmRc+eOkilm/z9OvTtnjN4hYk1YoT3H2rnBOphPAB9skgq3 2lcaX/5YnJVt9BloAar12UEIRGCZdQghMABI1Tn32IQUVthYexhmqGGGMBHAgIfEhSiiiATAtOGJ GnYI4ogsEldicAYOGNJGZaml3Y0L3NTZUBz1xlB0PUoUI0jlVWRSVN89xBKSGB1YU1TMoRfVBEle hR9HQs1GEHxQ3RZZbveZthxt/LEmXHyp5XWABSCpaRJwbM13gAACPHVccgJFgF+NEhqUAEkQSCfc ddhVhh5dVTaEAEsTUNlkZUWKN9BNGDE6QU8OrSdbllzpxyVTTrU21Uj3scfhp7nNpyoDaTIEJ3P9 If8J2kbLNYegg9JRBwGhFvbq66+ZUiDssMQWK2yHxiZLrInKNotss8l+B5yBrr5p2UIJvortANoC 6+234IbLla/elRtZjeamh5CC3Sb0YLvixivvYkDFGlZqBNh7r4n6goVvv6/ZlCicN+kL71ALTnpQ dCIZp7CihkLA3UQmoWRBogyxtBPGCTnZncVR1rSTo5nuydC/Eo8kUH+lOoTyyvjoCuZu+PjYIKLD rZybtrM1d10C0QXKEVz48GrQkEeWdFJKlbb0UmEeV0SzyC6RvNB646LWIVjUNeC1zAFb+RDKXksM 9r531bwmpQW9+hQDDsx5pqwDRWBXcFES2hc+gEn/wJGdEEWdE6LoWcoxQweaTNmkhydkKaYMYY2Q p1unbLl/pPKbn3v7EZRvrKvqlja2ONvrtoIw9tn2g32/tQBlhtYkU+MNikZ7QYlPDPuMldpOmuJX nVo5VF3HjI+q89mteX5IDd/fVFClma5kiE4f2XUJhlz09gj2NbTDRifkmu7zXjR++RVJ/lPznuvr QH2iD6S+UewP9Dnon6d2NLwN8n90BB6hC68cFMCHoe+ACASP9c4DowUyEF0OPFcDI0ij/VXPaAKC UfhS95AKGoQ7IBRICI1HwhGaUIQoLGEKT6jCFrLwhSuMoQtlCMMZ2rCGOKShDm+4wxzy8Ic+DGIP B4cIRCKGMCAAOy== ------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/frame.htm content-transfer-encoding: quoted-printable content-type: text/html; charset="us-ascii" MHT (IE Only) ------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/outline.htm content-transfer-encoding: quoted-printable content-type: text/html; charset="us-ascii" MHT (IE Only)

1	Network Log Anonymization: Application of Crypto-PAn to Cisco Netflows
2	Motivation for = Sharing Logs Share for Security Research Create better detection tools and test them Security Operations Network Measurements Who says its important? DHS with Information Sharing and Analysis Centers National Strategy to Secure Cyberspace Why Netflows?
3	IP Anonymization Techniques Black Marker Effect Great information loss Cannot correlate attacks against machine X Truncation Finer grained control of information loss Used for Source Report at ISC Origins of scans Random Permutations Injective Mapping, a type of pseudonymization Allows correlation but destroys structure
4	Prefix-Preservi= ng Anonymization Definition Let P be a permutation of the set of IP addresses P is a prefix-preserving anonymization function if and only if for= all IP addresses x and y: x and y match on exactly the same length prefix as P(x) and P(y)<= /li> Preserves subnet structures and relationships Structure can of course be exploited by attackers
5	Prefix Preservi= ng Tools Crypto-PAn Key based solution TCPdpriv Table based solution for TCPdump files Ip2anonip A filter to anonymize IP addresses based off TCPdpriv Ipsumdump Summarizes TCP/IP dumps Optionally performs prefix-preserving anonymization based off TCPd= priv
6	What We Have Do= ne The problem: Our visualization tools use netflows We need students to work on these projects Information is sensitive Subnet structure is vital to tools. Thus Crypto-PAn is ideal. No key generator in Crypto-Pan Created a pass-phrase based key generator without extra libraries
7	Key Generator Input passphrase (unechoed), max 256 bytes Wrap till buffer filled CBC encrypt with fixed key This combines data to create an intermediate key Why can’t we just XOR blocks? Cannot stop here, processes is reversible Use the intermediate key to re-encrypt the original buffer Take the last 32 bytes as the end key Even without dropping 244 bytes, this is irreversible
8	Performance= Work on binary logs Avoids extra conversions On laptop still less than 20 minutes for 2 Gigabytes of flows
9	Conclusions &am= p; Future Work Feasible solution for even large universities Provides high utility, but lower security Many attacks on anonymization schemes Inference attacks, chosen plaintext, structure exploitation Need new options to balance utility & security Different levels of anonymization Means considering more fields Different types of logs
10	Thank You<= /font> Email: slagell@ncsa.uiuc.edu Links of Interest http://www.ncassr.org/projects/sift/ http://www.ncsa.uiuc.edu/ http://slagellware.com/ http://www.cc.gatech.edu/computing/Telecomm/cryptopan/

------=_NextPart_01C4F198.1B608590 content-location: file:///C:/C8A43DDF/2A-04-slagell__files/filelist.xml content-transfer-encoding: quoted-printable content-type: text/xml; charset="utf-8" ------=_NextPart_01C4F198.1B608590--