Combining fragmentation and encryption to protect privacy in data storage

ACM Transactions on Information and System Security

Volumn 13, Issue 3, 2010, Pages

  Ciriani, Valentina ^a   Di Vimercati, Sabrina De Capitani ^a   Foresti, Sara ^a   Jajodia, Sushil ^b   Paraboschi, Stefano ^c   Samarati, Pierangela ^a  

^a UNIVERSITY OF MILAN   (Italy)

^b GEORGE MASON UNIVERSITY   (United States)

^c UNIVERSITY OF BERGAMO   (Italy)

Author keywords

Encryption; Fragmentation; Privacy

Indexed keywords

CRYPTOGRAPHY; DATA ACQUISITION; DIGITAL STORAGE; HEURISTIC ALGORITHMS; LAWS AND LEGISLATION; OPTIMIZATION; POLYNOMIAL APPROXIMATION; POLYNOMIALS;

DATA FRAGMENTATION; ENCRYPTION TECHNIQUE; FRAGMENTATION; MODERN APPLICATIONS; PERSONAL INFORMATION; POLYNOMIAL-TIME COMPUTATION; PRIVACY REQUIREMENTS; SENSITIVE INFORMATIONS;

DATA PRIVACY;

EID: 77955210832     PISSN: 10949224     EISSN: 15577406     Source Type: Journal    
DOI: 10.1145/1805974.1805978     Document Type: Article

References (24)

1. AGGARWAL, G., BAWA, M., GANESAN, P., GARCIA-MOLINA, H., KENTHAPADI, K., MOTWANI, R., SRIVASTAVA, U., THOMAS, D., AND XU, Y. 2005. Two can keep a secret: A distributed architecture for secure database services. In Proceedings of the Conference on Innovative Data Systems Research. http://www.cidrdb.org/.
2. BISKUP, J., EMBLEY, D., AND LOCHNER, J. 2008. Reducing inference control to access control for normalized database schemas. Inform. Process. Lett. 106, 1, 8-12.
3. BISKUP, J. AND LOCHNER, J. 2007. Enforcing confidentiality in relational databases by reducing inference control to access control. In Proceedings of the 10th International Conference on Information Security.
4. CA SB 1386. 2002. California senate bill SB 1386.
5. CESELLI, A., DAMIANI, E., DE CAPITANI DI VIMERCATI, S., JAJODIA, S., PARABOSCHI, S., AND SAMARATI, P. 2005. Modeling and assessing inference exposure in encrypted databases. ACM Trans. Inform. Syst. Secur. 8, 1, 119-152.
6. CHAUDHURI, S. 1998. An overview of query optimization in relational systems. In Proceedings of the 17th SIGACT-SIGMOD-SIGART Symposium on Principles of Database Systems. ACM, New York.
7. CIRIANI, V., DE CAPITANI DI VIMERCATI, S., FORESTI, S., JAJODIA, S., PARABOSCHI, S., AND SAMARATI, P. 2007a. Fragmentation and encryption to enforce privacy in data storage. In Proceedings of the 12th European Symposium on Research in Computer Security. Springer, Berlin.
8. CIRIANI, V., DE CAPITANI DI VIMERCATI, S., FORESTI, S., AND SAMARATI, P. 2007b. k-Anonymity. In Secure Data Management in Decentralized Systems, T. Yu and S. Jajodia, Eds. Springer-Verlag, Berlin.
9. DAMIANI, E., DE CAPITANI DI VIMERCATI, S., JAJODIA, S., PARABOSCHI, S., AND SAMARATI, P. 2003. Balancing confidentiality and efficiency in untrusted relational DBMSs. In Proceedings of the 10th Conference on Computer and Communications Security. ACM, New York.
10. DAWSON, S., DE CAPITANI DI VIMERCATI, S., LINCOLN, P., AND SAMARATI, P. 2002. Maximizing sharing of protected information. J. Comput. Syst. Sci. 64, 3, 496-541.
11. GAREY, M. R. AND JOHNSON, D. S. 1979. Computers and Intractability: A Guide to the Theory of NP-Completeness. W. H. Freeman, New York.
12. HACIGÜMÜS, H., IYER, B., ANDMEHROTRA, S. 2002a. Providing database as a service. In Proceedings of the 18th International Conference on Data Engineering. IEEE, Los Alamitos, CA.
13. HACIGÜMÜS, H., IYER, B.,MEHROTRA, S., AND LI, C. 2002b. Executing SQL over encrypted data in the database-service-provider model. In Proceedings of the SIGMOD International Conference on Management of Data. ACM, New York.
14. HOFMEISTER, T. AND LEFMANN, H. 1998. Approximating maximum independent sets in uniform hypergraphs. In Proceeding of the 23rd International Symposium on Mathematical Foundations of Computer Science. Springer, Berlin.
15. KRIVELEVICH, M. AND SUDAKOV, B. 2003. Approximate coloring of uniform hypergraphs. J. Algorithms 49, 1, 2-12.
16. NAVATHE, S., CERI, S., WIEDERHOLD, G., AND DOU, J. 1984. Vertical partitioning algorithms for database design. ACM Trans. Datab. Syst. 9, 4, 680-710.
17. NAVATHE, S. AND RA, M. 1989. Vertical partitioning for database design: A graphical algorithm. In Proceedings of the SIGMOD International Conference on Management of Data. ACM, New York.
18. OZSU, M. T. AND VALDURIEZ, P. 1999. Principles of Distributed Database Systems 2nd Ed. Prentice- Hall, Upper Saddle River, NJ.
19. PERSONAL DATA PROTECTION CODE. 2003. Legislative Decree no. 196.
20. PICDSS. 2006. Payment Card Industry (PCI) data security standard. https://www. pcisecuritystandards.org/pdfs/pci dss v1-1.pdf.
21. SAMARATI, P. 2001. Protecting respondents' identities in microdata release. IEEE Trans. Knowl. Data Eng. 13, 6, 1010-1017.
22. SCHNEIER, B. 1996. Applied Cryptography 2nd Ed. John Wiley & Sons, New York.
23. TROUESSIN, G.,FABRE, J. C., ANDDESWARTE,Y. 1991. Reliable processing of confidential information. In Proceedings of the 7th International Information Security Conference. Springer, Berlin.
24. WANG, H. AND LAKSHMANAN, L. V. S. 2006. Efficient secure query evaluation over encrypted XML databases. In Proceedings of the 32nd International Conference on Very Large Data bases. ACM, New York.