Researchers at Cornell Tech have introduced a system called CSAL (Client-Side Encrypted Access Logging) that helps detect hacked accounts without compromising privacy. The development was presented at the USENIX Symposium.
The researchers have figured out how to identify hacked accounts.
Modern platforms log account access with IP addresses and device identifiers. The problem is that hackers can easily spoof this data, impersonating logins from devices familiar to the system, even after a compromise.
CSAL uses an encryption method: the operating system generates an encrypted token using device data. This information is stored by the provider, but only the account owner can decrypt it using a private key.
Users will be able to detect unauthorized access without exposing personal data, and the platform will eliminate the need to store digital fingerprints for monitoring. The creators claim that CSAL is easily integrated into existing security systems.
