Assertion Partly supported AI assessment confidence: 95% certainty 4/5 debate potential 1/5

Popa: BlindBox equality matching supports watermarks, filtering, and IDS rules

Raluca Ada Popa · Raluca Ada Popa · Jul 28, 2017 · at 11:14

UC Berkeley professor Raluca Ada Popa details the practical network security applications supported by BlindBox's basic equality matching protocol.

0:00 / 0:10exact quote · 10.4s

▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark

“Only the equality part that I told you about can support already watermarks, checking if exfiltrated documents contain watermarks, and parental filtering, and a bunch of the IDS rules.”

quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →

The claim, plainly

BlindBox's exact string equality protocol alone supports document watermarking, parental content filtering, and numerous intrusion detection system (IDS) rules.

a quote alone can be ambiguous, so this restates it with the references and context of the conversation around it resolved. AI-written; the tape below the player is the source.

Assessment

The published BlindBox paper (ACM SIGCOMM 2015) confirms that Protocol I (the exact string equality protocol) fully supports document watermarking (100%) and parental content filtering (100%). However, the claim that Protocol I alone supports 'numerous' or 'a bunch of' intrusion detection system (IDS) rules is contradicted by the paper's evaluation. In Section 2.2, the paper explicitly notes that Protocol I 'can support only a few IDS rules', and Table 1 demonstrates that Protocol I supports only 0% to 5% of rules across standard HTTP IDS rule sets (Snort Community 3%, Snort Emerging Threats 1.6%, McAfee Stonesoft 5%, Lastline 0%). Broader IDS rule coverage requires Protocol II or Protocol III.

BlindBox paper Table 1 shows Protocol I supports 100% of document watermarking and parental filtering rules, but only 0%-5% of evaluated IDS rule sets.
Section 2.2 of the paper explicitly states Protocol I 'suffices for document watermarking and parental filtering applications, but can support only a few IDS rules'.

Checked against

[1] scispace.com [2] berkeley.edu [3] justinesherry.com [4] berkeley.edu [5] semanticscholar.org

"Table 1" "BlindBox" "Protocol I" "Protocol II" "Protocol III" "Protocol I" "Table 1" "BlindBox" "parental filtering" "watermarking" "IDS" BlindBox Deep Packet Inspection paper exact string equality watermarking parental filtering IDS BlindBox exact string equality protocol document watermarking parental content filtering IDS rules

assessed as of 2026-07-28

This assessment is an AI reading of a public statement, made against the cited references with the confidence shown. It can be wrong. The quote, the tape and the references are all on this page; if something is off, use report an error below. full disclaimer →

Mentioned

BlindBox IDS rules

⚑ Spot an error? Report it

More from Raluca Ada Popa

Opinion

Current HTTPS middlebox workarounds rely on man-in-the-middle attacks

“And actually, the solution is very embarrassing and insecure solution. People basically mount a man in the middle attack on SSL.”

Raluca Ada Popa Jul 28, 2017 ▶ 3:04 Raluca Ada Popa

Assertion Supported

Popa: BlindBox inspects encrypted traffic while maintaining user privacy

“So I'm going to tell you about some very recent work on Blindbox, which enables us to inspect traffic that remains encrypted and protect the privacy of the users.”

Raluca Ada Popa Jul 28, 2017 ▶ 0:14 Raluca Ada Popa

Prediction Not checkable as stated

Popa: Computing on encrypted data will significantly impact industry

“And then I'm going to scope out from this and tell you about a bigger vision that Blindbox is part of, namely Computing on encrypted data, which I think can have a lot of impact to industry and to what people use today.”

Raluca Ada Popa Jul 28, 2017 ▶ 0:25 Raluca Ada Popa

Assertion Supported

Popa: BlindBox is first system enabling DPI on encrypted traffic

“Our system blind box is the first to show that this could be possible, and is the first system that enables DPI middle boxes to inspect traffic without seeing the traffic.”

Raluca Ada Popa Jul 28, 2017 ▶ 4:22 Raluca Ada Popa

Assertion Supported

Popa: BlindBox encryption matches security of randomized and speed of deterministic schemes

“So as part of Blindbox, our first contribution was to construct such a scheme. A scheme that is as secure as randomized schemes, and as fast as deterministic schemes.”

Raluca Ada Popa Jul 28, 2017 ▶ 8:34 Raluca Ada Popa

Assertion Supported

Popa: BlindBox detection speed is competitive with Snort

“So the detection of the middle box is competitive to Snort.”

Raluca Ada Popa Jul 28, 2017 ▶ 11:48 Raluca Ada Popa

Popa: BlindBox equality matching supports watermarks, filtering, and IDS rules

More from Raluca Ada Popa

Turn any episode into a week of clips.