Private data indexes for selective access to outsourced data

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2011, Pages 69-79

  De Capitani Di Vimercati, Sabrina ^a   Foresti, Sara ^a   Jajodia, Sushil ^b   Paraboschi, Stefano ^c   Samarati, Pierangela ^a  

^a UNIVERSITY OF MILAN   (Italy)

^b GEORGE MASON UNIVERSITY   (United States)

^c UNIVERSITY OF BERGAMO   (Italy)

Author keywords

Access control; Data indexes; Data outsourcing; Privacy

Indexed keywords

DATA INDEXES; DATA OUTSOURCING; DATA PROTECTION; ENCRYPTED DATA; INDEXING TECHNIQUES; PLAINTEXT; PRIVATE DATA; QUERY EVALUATION; QUERY EXECUTION; STORAGE SERVICES;

CLOUD COMPUTING; CRYPTOGRAPHY; INDEXING (OF INFORMATION);

ACCESS CONTROL;

EID: 80955143483     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2046556.2046566     Document Type: Conference Paper

References (26)

1. R. Agrawal, J. Kierman, R. Srikant, and Y. Xu. Order preserving encryption for numeric data. In Proc. of SIGMOD 2004, Paris, France, June 2004.
2. M. Atallah, M. Blanton, N. Fazio, and K. Frikken. Dynamic and efficient key management for access hierarchies. ACM TISSEC, 12(3):18:1-18:43, January 2009.
3. A. Azzini, S. Marrara, R. Sassi, and F. Scotti. A fuzzy approach to multimodal biometric continuous authentication. Fuzzy Optimization and Decision Making, 7(3):243-256, September 2008.
4. M. Barni et al. Privacy-preserving fingercode authentication. In Proc. of MM&Sec 2010, Rome, Italy, September 2010.
5. A. Ceselli, E. Damiani, S. De Capitani di Vimercati, S. Jajodia, S. Paraboschi, and P. Samarati. Modeling and assessing inference exposure in encrypted databases. ACM TISSEC, 8(1):119-152, February 2005. (Pubitemid 40479431)
6. S. Cimato, M. Gamassi, V. Piuri, R. Sassi, and F. Scotti. Privacy-aware biometrics: Design and implementation of a multimodal verification system. In Proc. of ACSAC 2008, Anaheim, CA, USA, December 2008.
7. E. Damiani, S. De Capitani di Vimercati, S. Jajodia, S. Paraboschi, and P. Samarati. Balancing confidentiality and efficiency in untrusted relational DBMSs. In Proc. of CCS 2003, Washington, DC, USA, October 2003.
8. S. De Capitani di Vimercati, S. Foresti, S. Jajodia, S. Paraboschi, and P. Samarati. Encryption policies for regulating access to outsourced data. ACM TODS, 35(2):12:1-12:46, April 2010.
9. S. De Capitani di Vimercati, S. Foresti, S. Jajodia, S. Paraboschi, and P. Samarati. Fragments and loose associations: Respecting privacy in data publishing. Proc. of the VLDB Endowment, 3(1):1370-1381, September 2010.
10. S. De Capitani di Vimercati, S. Foresti, S. Paraboschi, and P. Samarati. Privacy of outsourced data. In A. Acquisti, S. Gritzalis, C. Lambrinoudakis, and S. De Capitani di Vimercati, editors, Digital Privacy: Theory, Technologies and Practices. Auerbach Publications (Taylor and Francis Group), 2007.
11. M. Gamassi, M. Lazzaroni, M. Misino, V. Piuri, D. Sana, and F. Scotti. Accuracy and performance of biometric systems. In Proc. of IMTC 2004, Como, Italy, May 2004.
12. M. Gamassi, V. Piuri, D. Sana, and F. Scotti. Robust fingerprint detection for access control. In Proc. of RoboCare 2005, Rome, Italy, May 2005.
13. M. R. Garey and D. S. Johnson. Computers and Intractability. Freeman and Company, 1979.
14. H. Hacigümüs, B. Iyer, and S. Mehrotra. Ensuring the integrity of encrypted databases in the database as a service model. In Proc. of DBSec 2003, Estes Park, CO, USA, August 2003.
15. H. Hacigümüs, B. Iyer, S. Mehrotra, and C. Li. Executing SQL over encrypted data in the database-service-provider model. In Proc. of SIGMOD 2002, Madison, WI, USA, June 2002.
16. Health Insurance Portability and Accountability Act. http://www.hhs.gov/ ocr/privacy/.
17. F. Li, M. Hadjieleftheriou, G. Kollios, and L. Reyzin. Dynamic authenticated index structures for outsourced databases. In Proc. of SIGMOD 2006, Chicago, IL, USA, June 2006.
18. G. Miklau and D. Suciu. Controlling access to published data using cryptography. In Proc. of VLDB 2003, Berlin, Germany, September 2003.
19. Payment card industry (PCI) data security standard, September 2006. https://www.pcisecuritystandards.org/documents/pci-dss-v2.pdf.
20. P. Samarati and S. De Capitani di Vimercati. Data protection in outsourcing scenarios: Issues and directions. In Proc. of ASIACCS 2010, Beijing, China, April 2010.
21. E. Shmueli, R. Waisenberg, Y. Elovici, and E. Gudes. Designing secure indexes for encrypted databases. In Proc. of DBSec 2005, Storrs, CT, USA, August 2005.
22. The DBLP computer science bibliography. http://dblp.uni-trier.de.
23. The transaction processing performance council (TPC) benchmark H. http://www.tpc.org/tpch/.
24. H. Wang and L. V. S. Lakshmanan. Efficient secure query evaluation over encrypted XML databases. In Proc. of VLDB 2006, Seoul, Korea, September 2006.
25. M. Xie, H. Wang, J. Yin, and X. Meng. Integrity auditing of outsourced data. In Proc. of VLDB 2007, Vienna, Austria, September 2007.
26. S. Yu, C. Wang, K. Ren, and W. Lou. Achieving secure, scalable, and fine-grained data access control in cloud computing. In Proc. of INFOCOM 2010, San Diego, CA, USA, March 2010.