Introducing secure provenance: Problems and challenges

StorageSS'07 - Proceedings of the 2007 ACM Workshop on Storage Security and Survivability

Volumn , Issue , 2007, Pages 13-18

  Hasan, Ragib ^a   Sion, Radu ^b   Winslett, Marianne ^a  

^a University of Illinois at Urbana Champaign   (United States)

^b STONY BROOK UNIVERSITY   (United States)

Author keywords

Lineage; Provenance; Secure storage

Indexed keywords

DATA PROVENANCE; LEGAL PROCEEDINGS; POSITION PAPERS; PROBLEMS AND CHALLENGES; SCIENTIFIC COMPUTING; SECURE STORAGE; SECURITY AND PRIVACY ISSUES;

ARTS COMPUTING;

NETWORK SECURITY;

EID: 62749161358     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1314313.1314318     Document Type: Conference Paper

References (39)

1. IBM 4758 PCI Cryptographic Coprocessor. Online at http://www-03.ibm.com/ security/cryptocards/pcicc/overview.shtml, 2006.
2. IBM 4764 PCI-X Cryptographic Coprocessor. Online at http://www-03.ibm. com/security/cryptocards/pcixcc/overview.shtml, 2007.
3. IBM Cryptographic Hardware. Online at http://www-03.ibm.com/security/ products/, 2007.
4. Trusted Computing Group. Online at https://www.trustedcomputinggroup.org/ , 2007.
5. Trusted Platform Module (TPM) Specifications. Online at https://www.trustedcomputinggroup.org/specs/TPM, 2007.
6. A. Adya, W. J. Bolosky, M. Castro, G. Cermak, R. Chaiken, J. R. Douceur, J. Howell, J. R. Lorch, M. Theimer, and R. P. Wattenhofer. Farsite: federated, available, and reliable storage for an incompletely trusted environment. SIGOPS Oper. Syst. Rev., 36 (SI): 1-14, 2002.
7. R. S. Barga and L. A. Digiampietri. Automatic generation of workflow provenance. In Proceedings of the International Provenance and Annotation Workshop (IPAW), pages 1-9, 2006.
8. U. Braun, S. L. Garfinkel, D. A. Holland, K.-K. Muniswamy-Reddy, and M. I. Seltzer. Issues in automatic provenance collection. In Proceedings of the International Provenance and Annotation Workshop (IPAW), pages 171-183, 2006.
9. P. Buneman, A. Chapman, and J. Cheney. Provenance management in curated databases. In SIGMOD '06: Proceedings of the 2006 ACM SIGMOD international conference on Management of data, pages 539-550, New York, NY, USA, 2006. ACM Press.
10. P. Buneman, A. Chapman, J. Cheney, and S. Vansummeren. A provenance model for manually curated data. In Proceedings of the International Provenance and Annotation Workshop (IPAW), pages 162-170, 2006.
11. P. Buneman, S. Khanna, and W. C. Tan. Data provenance: Some basic issues. In FST TCS 2000: Proceedings of the 20th Conference on Foundations of Software Technology and Theoretical Computer Science, pages 87-93, London, UK, 2000. Springer-Verlag.
12. P. Buneman, S. Khanna, and W. C. Tan. Why and where: A characterization of data provenance. Lecture Notes in Computer Science, 1973:316-330, 2001.
13. Centers for Medicare & Medicaid Services. The Health Insurance Portability and Accountability Act of 1996 (HIPAA). Online at http://www.cms.hhs.gov/hipaa/, 1996.
14. U. S. Congress. Federal rules of civil procedure. Online at http://www.law.cornell.edu/rules/frcp/, 2006.
15. F. Dabek, M. F. Kaashoek, D. Karger, R. Morris, and I. Stoica. Wide-area cooperative storage with cfs. SIGOPS Oper. Syst. Rev., 35 (5):202-215, 2001.
16. B. W. Dearstyne. The archival enterprise: Modern archival principles, practices, and management techniques. American Library Association, 1993.
17. E. Deelman, G. Singh, M. Atkinson, A. Chervenak, N. C. Hong, C. Kesselman, S. Patil, L. Pearlman, and M. Su. Grid-based metadata services. In SSDBM '04: Proceedings of the 16th International Conference on Scientific and Statistical Database Management (SSDBM'04), page 393, Washington, DC, USA, 2004. IEEE Computer Society.
18. I. T. Foster, J. Vockler, M. Wilde, and Y. Zhao. Chimera: A virtual data system for representing, querying, and automating data derivation. In SSDBM '02: Proceedings of the 14th International Conference on Scientific and Statistical Database Management, pages 37-46, Washington, DC, USA, 2002. IEEE Computer Society.
19. J. Frew and R. Bose. Earth system science workbench: A data management infrastructure for earth science products. In SSDBM '01: Proceedings of the Thirteenth International Conference on Scientific and Statistical Database Management, page 180, Washington, DC, USA, 2001. IEEE Computer Society.
20. C. Goble. Position statement: Musings on provenance, workflow workflow and (semantic web) annotations for bioinformatics. In Workshop on Data Derivation and Provenance, Chicago, 2002.
21. J. Golbeck. Combining provenance with trust in social networks for semantic web content filtering. In Proceedings of the International Provenance and Annotation Workshop (IPAW), pages 101-108, 2006.
22. R. Hasan, Z. Anwar, W. Yurcik, L. Brumbaugh, and R. Campbell. A survey of peer-to-peer storage techniques for distributed file systems. In ITCC '05: Proceedings of the International Conference on Information Technology: Coding and Computing (ITCC'05) - Volume II, pages 205-213, Washington, DC, USA, 2005. IEEE Computer Society.
23. R. Hasan, S. Myagmar, A. J. Lee, and W. Yurcik. Toward a threat model for storage systems. In Proceedings of the first ACM workshop on Storage security and survivability (StorageSS), pages 94-102, Fairfax, VA, USA, 2005. ACM Press.
24. R. Hasan and W. Yurcik. A statistical analysis of disclosed storage security breaches. In Proceedings of the second ACM workshop on storage security and survivability (StorageSS), pages 1-8, Alexandria, Virginia, USA, 2006. ACM Press.
25. J. Kubiatowicz, D. Bindel, Y. Chen, S. Czerwinski, P. Eaton, D. Geels, R. Gummadi, S. Rhea, H. Weatherspoon, W. Weimer, C. Wells, and B. Zhao. Oceanstore: an architecture for global-scale persistent storage. SIGPLAN Not., 35 (11):190-201, 2000.
26. J. Li, M. Krohn, D. Mazières, and D. Shasha. Secure untrusted data repository (sundr). In OSDI'04: Proceedings of the 6th conference on Symposium on Opearting Systems Design & Implementation, pages 9-9, Berkeley, CA, USA, 2004. USENIX Association.
27. C. A. Lynch. When documents deceive: Trust and provenance as new factors for information retrieval in a tangled web. Journal of the American Society for Information Science and Technology, 52 (1):12-17, 2001.
28. K.-K. Muniswamy-Reddy, D. A. Holland, U. Braun, and M. I. Seltzer. Provenance-aware storage systems. In USENIX Annual Technical Conference, General Track, pages 43-56, 2006.
29. J. D. Myers, T. C. Allison, S. Bittner, B. Didier, M. Frenklach, J. William H. Green, Y.-L. Ho, J. Hewson, W. Koegler, C. Lansing, D. Leahy, M. Lee, R. McCoy, M. Minkoff, S. Nijsure, G. von Laszewski, D. Montoya, C. Pancerella, R. Pinzon, W. Pitz, L. A. Rahn, B. Ruscic, K. Schuchardt, E. Stephan, A. Wagner, T. Windus, and C. Yang. A collaborative informatics infrastructure for multi-scale science. clade, 00:24, 2004.
30. National Association of Insurance Commissioners. Graham-Leach-Bliley Act, 1999. www.naic.org/GLBA.
31. D. Reiner, G. Press, M. Lenaghan, D. Barta, and R. Urmston. Information lifecycle management: The emc perspective. icde, 00:804, 2004.
32. C. Sar and P. Cao. Lineage file system. Online at http://crypto.stanford. edu/cao/lineage.html, January 2005.
33. Y. L. Simmhan, B. Plale, and D. Gannon. A survey of data provenance in e-science. SIGMOD Rec., 34 (3):31-36, September 2005.
34. M. Szomszor and L. Moreau. Recording and reasoning over data provenance in web and grid services. In International Conference on Ontologies, Databases and Applications of SEmantics (ODBASE), volume 2888 of Lecture Notes in Computer Science, pages 603-620, Catania, Italy, 2003.
35. The U. S. Securities and Exchange Commission. Rule 17a-3&4, 17 CFR Part 240: Electronic Storage of Broker-Dealer Records. Online at http://edocket.access.gpo.gov/cfr-2002/aprqtr/17cfr240.17a-4.htm, 2003.
36. U. S. Public Law No. 107-204, 116 Stat. 745. The Public Company Accounting Reform and Investor Protection Act, 2002.
37. N. N. Vijayakumar and B. Plale. Towards low overhead provenance tracking in near real-time stream filtering. In Proceedings of the International Provenance and Annotation Workshop (IPAW), pages 46-54, 2006.
38. J. Widom. Trio: A system for integrated management of data, accuracy, and lineage. In Proceedings of the Second Biennial Conference on Innovative Data Systems Research (CIDR '05), January 2005.
39. J. Zhao, C. A. Goble, R. Stevens, and S. Bechhofer. Semantically linking and browsing provenance logs for e-science. In ICSNW, pages 158-176, 2004.