Towards a Secure Zero-rating Framework with Three Parties
summary
ZFree proposes a practical defense that prevents free‑riding by binding ISP zero‑rating to cryptographic per‑packet tags: server agents mirror outgoing packets to an ISP assistant which computes keyed hashes, enabling the ISP to verify response modification attack prevention and request masquerade resistance. Formal verification uses ProVerif and shows packet integrity and CP authenticity under encrypted channels. Prototype code is available and demoed, implementation is ~4k LOC across agents, tests hit 8–10 Gbps with under 9% page‑load overhead in blocking mode.
AI-written summary · about
chapters (4)
related talks
01h 11mPrivacy and Net neutrality: Mutually Reinforcing?
10mEconomics of Zero Trust
39mProtect Your Application, Not the Network. Add Zero Trust Superpowers to Your Critical...
32mImplementing Zero Trust
41mZero-Trust Networks: Identity, AuthN, AuthZ, Audit
40mClarifying Zero Trust: The Model, the Philosophy, the Ethos
13mZombie: Middleboxes that Don’t Snoop
37mZero Trust at the Edge: Bridging Industrial Systems With Verifiable Credentials and OpenZiti