On securing untrusted clouds with cryptography

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2010, Pages 109-114

  Chen, Yao ^a   Sion, Radu ^a  

^a Stony Brook University   (United States)

Author keywords

cloud computing; economics; security

Indexed keywords

CLOUD COMPUTING; CPU CYCLES; CURRENT TECHNIQUES; ENCRYPTED DATA; ORDERS OF MAGNITUDE; SECURITY; SMALL ENTERPRISE;

CLOUDS; COMPUTER SYSTEMS; COSTS; CRYPTOGRAPHY; OUTSOURCING;

ECONOMICS;

EID: 78650219479     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1866919.1866935     Document Type: Conference Paper

References (40)

1. Amazon Elastic Compute Cloud. Online at http://aws.amazon.com/ec2.
2. IBM 4764 PCI-X Cryptographic Coprocessor. Online at http://www-03.ibm. com/security/cryptocards/ pcixcc/overview.shtml, 2007.
3. N. Agrawal, W. J. Bolosky, J. R. Douceur, and J. R. Lorch. A five-year study of file-system metadata. In Proceedings of the 5th USENIX conference on File and Storage Technologies (FAST 07), Berkeley, CA, USA, 2007. USENIX Association.
4. G. Amanatidis, A. Boldyreva, and A. O'Neill. Provably-secure schemes for basic query support in outsourced databases. In S. Barker and G.-J. Ahn, editors, DBSec, volume 4602 of Lecture Notes in Computer Science, pages 14-30. Springer, 2007.
5. APC. Determining total cost of ownership for data center and network room infrastructure. Online at http://www.apcmedia.com/salestools/CMRP-5T9PQG-R3-EN. pdf.
6. M. Bellare, A. Boldyreva, and A. O'Neill. Deterministic and efficiently searchable encryption. In A. Menezes, editor, CRYPTO, volume 4622 of Lecture Notes in Computer Science, pages 535-552. Springer, 2007.
7. D. J. Bernstein and T. L. (editors). ebacs: Ecrypt benchmarking of cryptographic systems. Online at http://bench.cr.yp.to accessed 30 Jan. 2009.
8. M. Blaze. A Cryptographic File System for Unix. In Proceedings of the first ACM Conference on Computer and Communications Security, pages 9-16, Fairfax, VA, 1993. ACM.
9. D. Boneh, C. Gentry, B. Lynn, and H. Shacham. Aggregate and verifiably encrypted signatures from bilinear maps. In EuroCrypt, 2003.
10. G. Cattaneo, L. Catuogno, A. D. Sorbo, and P. Persiano. The Design and Implementation of a Transparent Cryptographic Filesystem for UNIX. In Proceedings of the Annual USENIX Technical Conference, FREENIX Track, pages 245-252, Boston, MA, June 2001.
11. Y. Chen and R. Sion. Clouds: So Fast Yet So Far - Quantifying the Viability of Cloud Computing. Technical Report.
12. CNN. Feds seek Google records in porn probe. Online at http://www.cnn.com, Jan. 2006.
13. CNN. YouTube ordered to reveal its viewers. Online at http://www.cnn.com, July 2008.
14. R. Curtmola, J. Garay, S. Kamara, and R. Ostrovsky. Searchable symmetric encryption: improved definitions and efficient constructions. In CCS '06: Proceedings of the 13th ACM conference on Computer and communications security, pages 79-88, New York, NY, USA, 2006. ACM.
15. P. T. Devanbu, M. Gertz, C. Martel, and S. G. Stubblebine. Authentic third-party data publication. In IFIP Workshop on Database Security, pages 101-112, 2000.
16. Donna Bogatin. Google Apps data risks: Security vs. privacy. Online at http://blogs.zdnet.com/micro-markets/?p=1021, Feb. 2007.
17. J. R. Douceur and W. J. Bolosky. A large-scale study of file-system contents. In Proceedings of the ACM SIGMETRICS international conference on Measurement and modeling of computer systems, pages 59-70. ACM New York, NY, USA, 1999.
18. S. Ghemawat, H. Gobioff, and S. T. Leung. The Google File System. In Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP '03), pages 29-43, Bolton Landing, NY, October 2003. ACM SIGOPS.
19. Google Inc. Google App Engine. Online at http://code.google.com/ appengine/.
20. H. Hacigumus, B. Iyer, C. Li, and S. Mehrotra. Executing SQL over encrypted data in the database-service-provider model. In Proceedings of the ACM SIGMOD international conference on Management of data, pages 216-227. ACM Press, 2002.
21. J. Hamilton. Internet-scale service efficiency. Large Scale Distributed Systems & Middleware (LADIS 2008),, 2008.
22. B. Hore, S. Mehrotra, and G. Tsudik. A privacy-preserving index for range queries. In Proceedings of ACM SIGMOD, 2004.
23. A. Kashyap, S. Patil, G. Sivathanu, and E. Zadok. I3FS: An In-Kernel Integrity Checker and Intrusion Detection File System. In Proceedings of the 18th USENIX Large Installation System Administration Conference (LISA 2004), pages 69-79, Atlanta, GA, November 2004. USENIX Association.
24. Larry Dignan. Will you trust Google with your data? Online at http://blogs.zdnet.com/BTL/?p=4544, Feb. 2007.
25. M. Atallah and C. YounSun and A. Kundu. Efficient Data Authentication in an Environment of Untrusted Third-Party Distributors. In 24th International Conference on Data Engineering ICDE, pages 696-704, 2008.
26. Maithili Narasimha and Gene Tsudik. DSAC: integrity for outsourced databases with signature aggregation and chaining. Technical report, 2005.
27. C. Martel, G. Nuckolls, P. Devanbu, M. Gertz, A. Kwong, and S. Stubblebine. A general model for authenticated data structures. Technical report, 2001.
28. C. Martel, G. Nuckolls, P. Devanbu, M. Gertz, A. Kwong, and S. G. Stubblebine. A general model for authenticated data structures. Algorithmica, 39(1):21-41, 2004. (Pubitemid 40871671)
29. R. Merkle. Protocols for public key cryptosystems. In IEEE Symposium on Research in Security and Privacy, 1980.
30. J. Merritt. What google searches and data mining mean for you. Online at http: //www.talkleft.com/story/2006/01/25/692/74066.
31. Microsoft Research. Encrypting File System for Windows 2000. Technical report, Microsoft Corporation, July 1999. www.microsoft.com/windows2000/ techinfo/ howitworks/security/encrypt.asp.
32. E. Mykletun, M. Narasimha, and G. Tsudik. Authentication and integrity in outsourced databases. In Proceedings of Network and Distributed System Security (NDSS), 2004.
33. E. Mykletun, M. Narasimha, and G. Tsudik. Signature bouquets: Immutability for aggregated/condensed signatures. In Computer Security - ESORICS 2004, volume 3193 of Lecture Notes in Computer Science, pages 160-176. Springer, 2004.
34. M. Narasimha and G. Tsudik. Authentication of Outsourced Databases using Signature Aggregation and Chaining. In Proceedings of DASFAA, 2006.
35. Optimum. Optimum online plans. Online at http://www.buyoptimum.com.
36. H. Pang, A. Jain, K. Ramamritham, and K.-L. Tan. Verifying Completeness of Relational Query Results in Data Publishing. In Proceedings of ACM SIGMOD, 2005.
37. H. Pang and K.-L. Tan. Authenticating query results in edge computing. In ICDE '04: Proceedings of the 20th International Conference on Data Engineering, page 560, Washington, DC, USA, 2004. IEEE Computer Society.
38. G. Sivathanu, C. P. Wright, and E. Zadok. Enhancing File System Integrity Through Checksums. Technical Report FSL-04-04, Computer Science Department, Stony Brook University, May 2004. www.fsl.cs. sunysb.edu/docs/nc-checksum-tr/nc- checksum.pdf.
39. Tingjian Ge and Stan Zdonik. Answering aggregation queries in a secure system model. In VLDB '07: Proceedings of the 33rd international conference on Very large data bases, pages 519-530. VLDB Endowment, 2007.
40. Whitfield Diffie. How Secure Is Cloud Computing? Online at http: //www.technologyreview.com/computing/23951/, Nov. 2009.