Preventing history forgery with secure provenance

ACM Transactions on Storage

Volumn 5, Issue 4, 2009, Pages

  Hasan, Ragib ^a   Sion, Radu ^b   Winslett, Marianne ^a  

^a University of Illinois at Urbana Champaign   (United States)

^b Stony Brook University   (United States)

Author keywords

Audit; Confidentiality; Integrity; Lineage; Provenance; Security

Indexed keywords

APPLICATION LAYERS; DATA PROVENANCE; EMPIRICAL RESULTS; FILE SYSTEMS; MEDICAL DATA; RECORDING PROVENANCE; RIGHTS PROTECTION; RUNTIME OVERHEADS; SECURITY AND PRIVACY ISSUES; SYSTEM PROTOTYPE;

NETWORK SECURITY; REGULATORY COMPLIANCE;

QUALITY ASSURANCE;

EID: 73849140516     PISSN: 15533077     EISSN: 15533093     Source Type: Journal    
DOI: 10.1145/1629080.1629082     Document Type: Article

References (58)

1. AGRAWAL, N., BOLOSKY,W. J., DOUCEUR, J. R., AND LORCH, J. R. 2007. A five-year study of file-system metadata. In Proceedings of the 5th USENIX Conference on File and Storage Technologies (FAST). USENIX Association, Berkeley, CA.
2. ALDECO-PEREZ, R. AND MOREAU, L. 2008. Provenance-based Auditing of Private Data Use. In Proceedings of the BCS International Academic Research Conference, Visions of Computer Science.
3. BARGA, R. S. AND DIGIAMPIETRI, L. A. 2006. Automatic generation of workflow provenance. Lecture Notes in Computer Science, vol.4145, L. Moreau and I. T. Foster Eds, Springer, 1-9.
4. BERLINER, B. 1990. CVS II: Parallelizing software development. In Proceedings of the Winter USENIX Conference. USENIX Assoc., Berkeley, CA, 341-352.
5. BLUM, M. 1981. Coin flipping by telephone. In Proceedings of the International Cryptology Conference (CRYPTO). 11-15.
6. BRAUN, U., GARFINKEL, S. L., HOLLAND, D. A., MUNISWAMY-REDDY, K.-K., AND SELTZER, M. I. 2006. Issues in automatic provenance collection. Lecture Notes in Computer Science, vol.4145, L. Moreau and I. T. Foster Eds., I. T. Foster Eds, Springer, 171-183.
7. BRAUN, U., SHINNAR, A., AND SELTZER, M. 2008. Securing provenance. In Proceedings of the 3rd USENIX Workshop on Hot Topics in Security (USENIX HotSec). USENIX Association, Berkeley, CA.
8. BUNEMAN, P., CHAPMAN, A., AND CHENEY, J. 2006a. Provenance management in curated databases. In Proceedings of the ACM International Conference on Management of Data (SIGMOD). ACM Press, New York, NY, 539-550.
9. BUNEMAN, P., CHAPMAN, A., CHENEY, J., AND VANSUMMEREN, S. 2006b. A provenance model for manually curated data. Lecture Notes in Computer Science, vol.4145, L. Morean and I. T. Foster Eds., Springer, 162-170.
10. BUNEMAN, P.,KHANNA, S., AND TAN,W. C. 2000. Data provenance: Some basic issues. In Proceedings of the 20th Conference on Foundations of Software Technology and Theoretical Computer Science (FSTTCS). Springer-Verlag, 87-93.
11. BUNEMAN, P., KHANNA, S., AND TAN, W. C. 2001. Why and where: A characterization of data provenance. Lecture Notes in Computer Science, vol.1973, 316-330.
12. CENTERS FOR MEDICARE & MEDICAID SERVICES. 1996. The Health Insurance Portability and Accountability Act of 1996 (HIPAA). Online at http://www.cms.hhs.gov/hipaa/.
13. CHAPMAN, A., JAGADISH, H., AND RAMANAN, P. 2008. Efficient provenance storage. In Proceedings of the ACM International Conference on Management of Data (SIGMOD). ACM Press.
14. COLLINS-SUSSMAN, B. 2002. The subversion project: Buiding a better CVS. Linux J. 94, 3.
15. CONGRESS OF THE UNITED STATES. 1999. Gramm-Leach-Bliley Financial Services Modernization Act. Public. Law No. 106-102, 113 Stat. 1338.
16. DOUCEUR, J. R. AND BOLOSKY,W. J. 1999. A large-scale study of file-system contents. In Proceedings of the ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems. ACM New York, NY, 59-70.
17. ELLARD, D., LEDLIE, J., MALKANI, P., AND SELTZER, M. 2003. Passive NFS tracing of email and research workloads. In Proceedings of the 2nd USENIX Conference on File and Storage Technologies (FAST). USENIX Association, Berkeley, CA, 203-216.
18. FOSTER, I. T., VOCKLER, J.-S., WILDE, M., AND ZHAO, Y. 2002. Chimera: A virtual data system for representing, querying, and automating data derivation. In Proceedings of the 14th International Conference on Scientific and Statistical Database Management (SSDBM'02). IEEE Computer Society, Los Alamitos, CA, 37-46.
19. FREW, J. AND BOSE, R. 2001. Earth system science workbench: A data management infrastructure for earth science products. In Proceedings of the 13th International Conference on Scientific and Statistical Database Management (SSDBM'01). IEEE Computer Society, Los Alamitos, CA, 180.
20. GENNARO, R. AND ROHATGI, P. 2001. How to sign digital streams. Inform. Comput. 165, 1, 100-116.
21. GOBLE, C. 2002. Position statement: Musings on provenance, workflow workflow and (semantic web) annotations for bioinformatics. In Proceedings of the Workshop on Data Derivation and Provenance.
22. GOLBECK, J. 2006. Combining provenance with trust in social networks for semantic web content filtering. Lecture Notes in Computer Science, vol.4145, I. Moreau and I. T. Foster Eds, Springer, 101-108.
23. GOLLE, P. AND MODADUGU, N. 2001. Authenticating streamed data in the presence of random packet loss. In Proceedings of the Symposium on Network and Distributed Systems Security (NDSS), 13-22.
24. HALEVY,D. AND SHAMIR,A. 2002. TheLSDbroadcast encryption scheme. In Proceedings of the 22nd Annual International Cryptology Conference on Advances in Cryptology (CRYPTOZ). Springer- Verlag, 47-60.
25. HASAN, R., SION, R., AND WINSLETT, M. 2007. Introducing secure provenance: Problems and challenges. In Proceedings of the ACM Workshop on Storage Security and Survivability (StorageSS). ACM Press, New York, NY, 13-18.
26. HASAN, R., SION, R., AND WINSLETT, M. 2009. The case of the fake Picasso: Preventing history forgery with secure provenance. In Proceedings of the 7th USENIX Conference on File and Storage Technologies (FAST). USENIX Association, Berkeley, CA.
27. KATCHER, J. 1997. Postmark: A new file system benchmark. Network Appliance Tech. rep. TR3022.
28. KOGAN, N., SHAVITT, Y., ANDWOOL, A. 2006. A practical revocation scheme for broadcast encryption using smartcards. ACM Trans. Inform. Syst. Secur. 9, 3, 325-351.
29. LEUNG, A. W., PASUPATHY, S., GOODSON, G., AND MILLER, E. L. 2008. Measurement and analysis of large-scale network file system workloads. In Proceedings of the USENIX Annual Technical Conference. USENIX Association, Berkeley, CA, 213-226.
30. LOELIGER, J. 2006. Collaborating with GIT. Linux Mag.
31. LYNCH,C.A. 2001. When documents deceive: Trust and provenance as new factors for information retrieval in a tangled web. J. Amer. Soci. Inform. Sci. Tech. 52, 1, 12-17.
32. MANIATIS, P. AND BAKER, M. 2002. Secure history preservation through timeline entanglement. In Proceedings of the 11th USENIX Security Symposium. USENIX Association, Berkeley, CA, 297-312.
33. MELLA, G., FERRARI, E., BERTINO, E., AND KOGLIN, Y. 2006. Controlled and cooperative updates of XML documents in Byzantine and failure-prone distributed systems. ACM Trans. Inform. Syst. Secur. 9, 4, 421-460.
34. MINER, S. K. AND STADDON, J. 2001. Graph-based authentication of digital streams. In Proceedings of the IEEE Symposium on Security and Privacy. 232-246.
35. MOREAU, L., FREIRE, J., FUTRELLE, J., MCGRATH, R. E., MYERS, J., AND PAULSON, P. 2008. The open provenance model: An overview. In Proceedings of the International Provenance and Associations Workshop (IPAW), J. Freire, D. Koop, and L. Moreau, Eds. Lecture Notes in Computer Science, vol.5272. Springer, 323-326.
36. MOREAU, L., GROTH, P., MILES, S., VAZQUEZ-SALCEDA, J., IBBOTSON, J., JIANG, S., MUNROE, S., RANA, O., SCHREIBER, A., TAN, V., ANDVARGA, L. 2008. The provenance of electronic data. Comm.ACM51, 4, 52-58.
37. MUNISWAMY-REDDY, K.-K., BRAUN, U., HOLLAND, D. A., MACKO, P., MACLEAN, D., MARGO, D., SELTZER, M., AND SMOGOR, R. 2009. Layering in provenance systems. In Proceedings of the USENIX Annual Technical Conference. USENIX Association, Berkeley, CA.
38. MUNISWAMY-REDDY, K.-K., HOLLAND, D. A., BRAUN, U., AND SELTZER, M. I. 2006. Provenance-aware storage systems. In Proceedings of the USENIX Annual Technical Conference. USENIX Association, Berkeley, CA, 43-56.
39. MYERS, J. D., ALLISON, T. C., BITTNER, S., DIDIER, B., FRENKLACH, M., WILLIAM H. GREEN, J., HO, Y.-L., HEWSON, J., KOEGLER, W., LANSING, C., LEAHY, D., LEE, M., MCCOY, R., MINKOFF, M., NIJSURE, S., VON LASZEWSKI,G.,MONTOYA,D., PANCERELLA,C., PINZON, R., PITZ,W.,RAHN, L. A.,RUSCIC,B., SCHUCHARDT, K., STEPHAN, E., WAGNER, A., WINDUS, T., AND YANG, C. 2004. A collaborative informatics infrastructure for multi-scale science. In Proceedings of the 2nd International Workshop on Challenges of Large Applications in Distributed Environments (CLADE'04). IEEE Computer Society, Los Alamitos, CA, 24.
40. PERRIG, A., CANETTI, R., TYGAR, D., AND SONG, D. X. 2000. Efficient authentication and signing of multicast streams over lossy channels. In Proceedings of the IEEE Symposium on Security and Privacy. 56-73.
41. PETERSON, Z. N. J., BURNS, R., ATENIESE, G., AND BONO, S. 2007. Design and implementation of verifiable audit trails for a versioning file system. In Proceedings of the 5th USENIX Conference on File and Storage Technologies (FAST). USENIX Association, Berkeley, CA, 20-20
42. PUGH, W. 1990. Skip lists: A probabilistic alternative to balanced trees. Comm. ACM 33, 6, 668-676.
43. ROSELLI, D., LORCH, J. R., AND ANDERSON, T. E. 2000. A comparison of file system workloads. In Proceedings of the USENIX Annual Technical Conference. USENIX Association, Berkeley, CA.
44. SANDLER, D. AND WALLACH, D. S. 2007. Casting votes in the auditorium. In Proceedings of the USENIX Workshop on Accurate Electronic Voting Technology. USENIX Association, Berkeley, CA.
45. SAR, C. AND CAO, P. 2005. Lineage file system. http://crypto.stanford. edu/cao/lineage.html.
46. SCHNEIER, B. AND KELSEY, J. 1999. Secure audit logs to support computer forensics. ACM Trans. Inform. Syst. Secur. 2, 2, 159-176.
47. SELTZER, M., SMITH, K. A., BALAKRISHNAN, H., CHANG, J., MCMAINS, S., AND PADMANABHAN, V. 1995. File system logging versus clustering: A performance comparison. In Proceedings of the USENIX Annual Technical Conference. USENIX Association, Berkeley, CA, 21-21
48. SHAMIR, A. 1979. How to share a secret. Comm. ACM 22, 11, 612-613.
49. SIMMHAN,Y. L., PLALE, B., ANDGANNON,D. 2005. Asurvey of data provenance in e-science.SIGMOD Rec. 34, 3, 31-36.
50. SNODGRASS, R. T., YAO, S. S., AND COLLBERG, C. 2004. Tamper detection in audit logs. In Proceedings of the 30th International Conference on Very Large Data Bases (VLDB). VLDB Endowment, Toronto, Canada, 504-515.
51. SZOMSZOR, M. AND MOREAU, L. 2003. Recording and reasoning over data provenance in web and grid services. In Proceedings of the International Conference on Ontologies, Databases and Applications of SEmantics (ODBASE). Lecture Notes in Computer Science, vol.2888. 603-620.
52. TAN, V., GROTH, P., MILES, S., JIANG, S., MUNROE, S., TSASAKOU, S., AND MOREAU, L. 2006. Security issues in a SOA-based provenance system. Lecture Notes in Computer Science, vol.4145, I. Moreau and I. T. Foster Eds, Springer, 203-211.
53. TAN, V., MUNROE, S., GROTH, P., JIANG, S., MILES, S., AND MOREAU, L. 2006. A profile for nonrepudiable process documentation. Tech. rep., University of Southampton, http://eprints.ecs. soton.ac.uk/13054/.
54. U. S. SECURITIES AND EXCHANGE COMMISSION. 2003. Rule 17a-3&4, 17 CFR Part 240: Electronic Storage of Broker-Dealer Records. http://edocket.access. gpo.gov/cfr-2002/aprqtr/17cfr240. 17a-4.htm.
55. U.S. PUBLIC LAW NO. 107-204, 116 STAT. 745. 2002. Public Company Accounting Reform and Investor Protection Act.
56. VIJAYAKUMAR, N. N. AND PLALE, B. 2006. Towards low overhead provenance tracking in near realtime stream filtering. Lecture Notes in Computer Science, vol.4145, I. Moreau and I. T. Foster Eds, Springer, 46-54.
57. WIDOM, J. 2005. Trio: A system for integrated management of data, accuracy, and lineage. In Proceedings of the 2nd Biennial Conference on Innovative Data Systems Research (CIDR'05).
58. ZHAO, J., GOBLE, C. A., STEVENS, R., AND BECHHOFER, S. 2004. Semantically linking and browsing provenance logs for e-science. In Proceedings of the 1st International IFIP Conference on Semantics of a Networked World (ICSNW). 158-176.