Managing key hierarchies for access control enforcement: Heuristic approaches

Computers and Security

Volumn 29, Issue 5, 2010, Pages 533-547

  Blundo, Carlo ^a   Cimato, Stelvio ^b   De Capitani Di Vimercati, Sabrina ^b   De Santis, Alfredo ^a   Foresti, Sara ^b   Paraboschi, Stefano ^c   Samarati, Pierangela ^b  

^a UNIVERSITY OF SALERNO   (Italy)

^b UNIVERSITY OF MILAN   (Italy)

^c UNIVERSITY OF BERGAMO   (Italy)

Author keywords

Access control; Confidentiality; Data outsourcing; Encryption policy; Heuristics; Key hierarchies

Indexed keywords

CONFIDENTIALITY; DATA OUTSOURCING; ENCRYPTION POLICY; HEURISTICS; KEY HIERARCHY;

CRYPTOGRAPHY; INTEGER PROGRAMMING; OPTIMIZATION; OUTSOURCING; SECURITY SYSTEMS; SERVERS;

ACCESS CONTROL;

EID: 77955710442     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2009.12.006     Document Type: Article

References (20)

1. Agrawal R, Kierman J, Srikant R, Xu Y. Order preserving encryption for numeric data. In: Proceedings of SIGMOD 2004, Paris, France; 2004.
2. S. Akl, and P. Taylor Cryptographic solution to a problem of access control in a hierarchy ACM Transactions on Computer System 1 3 1983 239 248
3. Atallah M, Frikken K, Blanton M. Dynamic and efficient key management for access hierarchies. In: Proceedings of ACM CCS 2005, Alexandria, USA; 2005.
4. Ateniese G, De Santis A, Ferrara A, Masucci B. Provably-secure time-bound hierarchical key assignment schemes. In: Proceedings of ACM CCS 2006, Alexandria, USA; 2006.
5. Blundo C, Cimato S, De Capitani di Vimercati S, De Santis A, Foresti S, Paraboschi S, Samarati P. Efficient key management for enforcing access control in outsourced scenarios. In: Proceedings of IFIP SEC 2009, Cyprus; 2009.
6. A. Ceselli, E. Damiani, S. De Capitani di Vimercati, S. Jajodia, S. Paraboschi, and P. Samarati Modeling and assessing inference exposure in encrypted databases ACM Transactions on Information and System Security 8 1 2005 119 152
7. Damiani E, De Capitani di Vimercati S, Foresti S, Jajodia S, Paraboschi S, Samarati P. Selective data encryption in outsourced dynamic environments. In: Proceedings of VODCA 2006, Bertinoro, Italy; 2006.
8. Damiani E, De Capitani di Vimercati S, Foresti S, Jajodia S, Paraboschi S, Samarati P. An experimental evaluation of multi-key strategies for data outsourcing. In: Proceedings of IFIP SEC 2007, Sandton, South Africa; 2007.
9. De Capitani di Vimercati S, Foresti S, Jajodia S, Paraboschi S, Samarati P. Over-encryption: Management of access control evolution on outsourced data. In: Proceedings of the 33rd VLDB Conference, Vienna, Austria; 2007a.
10. De Capitani di Vimercati S, Foresti S, Jajodia S, Paraboschi S, Samarati P. A data outsourcing architecture combining cryptography and access control. In: Proceedings of CSAW 2007, Fairfax, USA; 2007b.
11. A. De Santis, A. Ferrara, and B. Masucci Cryptographic key assignment schemes for any access control policy Information Processing Letters 92 4 2004 199 205
12. M. Garey, and D. Johnson Computers and intractability; a guide to the theory of NP-completeness 1979 W.H. Freeman
13. Hacigümüs H, Iyer B, Mehrotra S, Li C. Executing SQL over encrypted data in the database-service-provider model. In: Proceedings of SIGMOD 2002, Madison, USA; 2002a.
14. Hacigümüs H, Iyer B, Mehrotra S. Providing database as a service. In: Proceedings of ICDE 2002, San Jose, USA; 2002b.
15. S. MacKinnon, P. Taylor, H. Meijer, and S. Akl An optimal algorithm for assigning cryptographic keys to control access in a hierarchy IEEE Transactions on Computers 34 9 1985 797 802
16. Miklau G, Suciu D. Controlling access to published data using cryptography. In: Proceedings of the 29th VLDB Conference, Berlin, Germany; 2003.
17. R. Sandhu Cryptographic implementation of a tree hierarchy for access control Information Processing Letters 27 2 1988 95 98
18. Scilab Consortium. Scilab, the open source platform for numerical computation, http://www.scilab.org, V. 4-1.
19. Shmueli E, Waisenberg R, Elovici Y, Gudes E. Designing secure indexes for encrypted databases. In: Proceedings of IFIP DBSec 2005, Storrs, USA; 2005.
20. Wang H, Lakshmanan LV. Efficient secure query evaluation over encrypted XML databases. In: Proceedings of the 32nd VLDB 2006 Conference, Seoul, Korea; 2006.