Secure and efficient access to outsourced data

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2009, Pages 55-65

  Wang, Weichao ^a   Li, Zhiwei ^a   Owens, Rodney ^a   Bhargava, Bharat ^b  

^a UNIVERSITY OF NORTH CAROLINA AT CHARLOTTE   (United States)

^b PURDUE UNIVERSITY   (United States)

Author keywords

Dynamic environment; Outsourced data; Secure data access

Indexed keywords

CLOUD COMPUTING; COMPUTATION OVERHEADS; DATA ACCESS; DATA BLOCKS; DYNAMIC ENVIRONMENTS; SECURE DATA; UPDATED DATA; USER ACCESS;

HASH FUNCTIONS; MACHINE DESIGN; NETWORK SECURITY;

ACCESS CONTROL;

EID: 74049154660     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1655008.1655016     Document Type: Conference Paper

References (32)

1. A. Adya, W. J. Bolosky, M. Castro, G. Cermak, R. Chaiken, J. R. Douceur, J. Howell, J. R. Lorch, M. Theimer, and R. P. Wattenhofer. Farsite: federated, available, and reliable storage for an incompletely trusted environment. SIGOPS Oper. Syst. Rev., 36(SI):1-14, 2002.
2. G. Alvarez, E. Borowsky, S. Go, T. Romer, R. Becker-szendy, R. Golding, A. Merchant, M. Spasojevic, A. Veitch, and J. Wilkes. Minerva: an automated resource provisioning tool for large-scale storage systems. ACM Transactions on Computer Systems, 19:483-518, 2001.
3. M. J. Atallah, M. Blanton, N. Fazio, and K. B. Frikken. Dynamic and efficient key management for access hierarchies. ACM Trans. Inf. Syst. Secur., 12(3):1-43, 2009.
4. M. Blaze. Key management in an encrypting file system. In Proceedings of the USENIX Summer Technical Conference, pages 27-35, 1994.
5. T. Chen, Y. Chung, and C. Tian. A novel key management scheme for dynamic access control in a user hierarchy. In IEEE Annual International Computer Software and Applications Conference, pages 396-401, 2004.
6. H. Chien and J. Jan. New hierarchical assignment without public key cryptography. Computers & Security, 22(6):523-526, 2003.
7. A. Chow, W. Coates, and D. Hopkins. A configurable asynchronous pseudorandom bit sequence generator. In IEEE International Symposium on Asynchronous Circuits and Systems, pages 143-152, 2007.
8. Cloud Security Alliance. Security guidance for critical areas of focus in cloud computing. http://www.cloudsecurityalliance.org/, April 2009.
9. E. Damiani, S. De Capitani di Vimercati, S. Foresti, S. Jajodia, S. Paraboschi, and P. Samarati. An Experimental Evaluation of Multi-Key Strategies for Data Outsourcing, IFIP International Federation for Information Processing, Volume 232, New Approaches for Security, Privacy and Trust in Complex Environments, pages 385-396. Springer, 2007.
10. E. Damiani, S. D. C. di Vimercati, S. Foresti, S. Jajodia, S. Paraboschi, and P. Samarati. Key management for multi-user encrypted databases. In Proceedings of the ACM workshop on Storage security and survivability, pages 74-83, 2005.
11. A. D'Atri and F. L. Ricci. Interpretation of statistical queries to relational databases. In Proceedings of the international conference on Statistical and Scientific Database Management, pages 246-258, 1988.
12. S. D. C. di Vimercati, S. Foresti, S. Jajodia, S. Paraboschi, and P. Samarati. A data outsourcing architecture combining cryptography and access control. In Proceedings of the ACM workshop on Computer security architecture, pages 63-69, 2007.
13. S. D. C. di Vimercati, S. Foresti, S. Jajodia, S. Paraboschi, and P. Samarati. Over-encryption: management of access control evolution on outsourced data. In Proceedings of the international conference on Very large data bases, pages 123-134, 2007.
14. E. Goh, H. Shacham, N. Modadugu, and D. Boneh. Sirius: Securing remote untrusted storage. In Proceedings of the Internet Society (ISOC) Network and Distributed Systems Security (NDSS) Symposium, pages 131-145, 2003.
15. M. T. Goodrich, C. Papamanthou, R. Tamassia, and N. Triandopoulos. Athos: Efficient authentication of outsourced le systems. In Proceedings of the international conference on Information Security, pages 80-96, 2008.
16. R. J. Jr. Isaac. In Third International Workshop on Fast Software Encryption, pages 41-49, 1996.
17. M. Kallahalla, E. Riedel, R. Swaminathan, Q. Wang, and K. Fu. Plutus: Scalable secure file sharing on untrusted storage. In Proceedings of the USENIX Conference on File and Storage Technologies, pages 29-42, 2003.
18. V. Kher and Y. Kim. Securing distributed storage: challenges, techniques, and systems. In Proceedings of the ACM workshop on Storage security and survivability, pages 9-25, 2005.
19. J. Li, M. Krohn, D. Mazières, and D. Shasha. Secure untrusted data repository (sundr). In Proceedings of the conference on Symposium on Opearting Systems Design & Implementation, pages 121-136, 2004.
20. P. Li, Z. Li, W. A. Halang, and G. Chen. A multiple pseudorandom-bit generator based on a spatiotemporal chaotic map. Physics Letters A, 349(6):467-473, 2006.
21. C. Lin. Hierarchical key assignment without public-key cryptography. Computers & Security, 20(7):612-619, 2001.
22. Z. Miled, Y. Liu, D. Powers, O. Bukhres, M. Bem, R. Jones, and R. Oppelt. An efficient implementation of a drug candidate database. J. Chem. Inf. Comput. Sci., 43(1):25-35, 2003.
23. E. Miller, D. Long, W. Freeman, and B. Reed. Strong security for distributed file systems. In IEEE International Conference on Performance, Computing, and Communications, pages 34-40, 2001.
24. OpenCrowd. Opencrowd cloud taxonomy. http://www.opencrowd.com/views/ cloud.php, 2009.
25. B. Preneel, et, and al. Performance of optimized implementations of the nessie primitives. Deliverable 21 from the NESSIE IST FP5 project, 2003.
26. P. J. Rhodes. Granite: a scientific database model and implementation. PhD thesis, University of New Hampshire, 2004. Adviser-Bergeron, R. Daniel and Adviser-Sparr, Ted M.
27. H. Sakamoto. Data grid deployment for high energy physics in japan. Computer Physics Communications, 177(1-2):239-242, July 2007.
28. A. Singh and L. Liu. Sharoes: A data sharing platform for outsourced enterprise storage environments. In Proceedings of the IEEE International Conference on Data Engineering, pages 993-1002, 2008.
29. W. Viana, B. Filho, and R. M. C. Castro. Pearl: a performance evaluator of cryptographic algorithms for mobile devices. In The First International Workshop on Mobility Aware Technologies and Applications (MATA), 2004.
30. B. Worthen. Inside the head of obama's cio. The Wall Street Journal Digits, March 5th, 2009.
31. M. Xie, H. Wang, J. Yin, and X. Meng. Integrity auditing of outsourced data. In Proceedings of the international conference on Very large data bases, pages 782-793, 2007.
32. S. Zhong. A practical key management scheme for access control in a user hierarchy. Computers & Security, 21(8):750-759, 200