Reasonable Expectation of Privacy in an IP Address – The Tor Browser and Other Anonymization Measures Midshipman 1/C Jonathan A. Goohs Professor Jeff Kosseff, Cyber Science Department Professor Ellis Fenske, Cyber Science Department Research Question Goals Conclusion There should be a reasonable Should there be a reasonable 1. Provide justification for a expectation of privacy in a user’s IP expectation of a user’s IP Address, reasonable expectation of Address because: protected by the 4th Amendment, privacy in a user’s IP Address. for those actively seeking • An active attempt at masking 2. Increase awareness of digital anonymity on the internet? your IP Address shows intent to privacy rights for individuals. Description of network traffic moving remain private 3. Explain and contrast different through hops on the Tor Browser (above) • This attempt to mask anonymization measures. Background Results communications lends to a user’s With the increasing desire for user digital right to privacy in the information privacy rights, there has been very little Major Cases Analyzed • From U.S. v. Maxwell, we know they create online with protection exploration of 4th Amendment protections emails sent from one person to under the 4th Amendment 1. Playpen Cases – Involves use of FBI another have reasonable of IP Addresses in combination with User digital privacy rights should be anonymization measures, which are the Network Investigation Technique expectation of privacy during increased as the public at large primary identifier for those on the (NIT) on the Tor network delivery to the recipient continually learn about how much internet. 2. Smith v. Maryland – Extension of 4th • Email is a simple function of the data they give up for free Amendment from physical objects to web, but so is using search engines include electronic information and visiting web pages Benefits of using 3. United States v. Carpenter – Courts • Given the public’s reliance on show hesitation in applying third part online activities to conduct daily anonymization measures doctrine where private information is activities, the third party doctrine revealed should be revised to increase user •Combat Censorship 4. United States. v. Warshak – privacy while surfing the web Compares Internet Service Provider (ISP) to a physical post office or •Free Speech Protections provided by TailsOS, Qubes, telephone company and Whonix (pictured above) •Journalism 5. Katz v. United States – Individuals can have a reasonable expectation of •Privacy from Marketers and privacy in information Acknowledgements Data Brokers 6.United States v Hood – no 1. Cybersecurity Law, Jeff Kosseff 2. Whonix •Avoid Surveillance reasonable expectation of privacy in an unmasked IP address Description of how network traffic 3. TailsOS moves from the host to internet on 4. The Tor Project Whonix gateway/workstation OS (above)