ObliviStore: High performance oblivious cloud storage

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2013, Pages 253-267

  Stefanov, Emil ^a   Shi, Elaine ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b UNIVERSITY OF MARYLAND   (United States)

Author keywords

file system; oblivious ram; oblivious storage; oblivistore; oram

Indexed keywords

DESIGN AND BUILD; FILE SYSTEMS; HIGH THROUGHPUT; OBLIVISTORE; ORAM; PREVENT INFORMATION LEAKAGE; SECURITY CHALLENGES; SOLID STATE DRIVES;

DIGITAL STORAGE;

EID: 84881250193     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2013.25     Document Type: Conference Paper

References (48)

1. http://www.storagereview.com/php/benchmark/suite-v4.php?typeID= 10&testbedID=4&osID=6&raidconfigID=1&numDrives=1&devID-0= 368&devCnt=1.
2. IBM 4764 PCI-X cryptographic coprocessor (PCIXCC). http://www-03.ibm.com/ security/cryptocards/pcixcc/overview.shtml.
3. Sloccount. http://www.dwheeler.com/sloccount/.
4. Ssd adoption in the real world. http://esj.com/blogs/enterprise-insights/ 2012/08/ssd-adoption.aspx.
5. Trusted computing group. http://www.trustedcomputinggroup.org/.
6. Personal communication with Radu Sion and Peter Williams., Nov. 2012.
7. D. Asonov and J.-C. Freytag. Almost optimal private information retrieval. In PET, 2003.
8. M. Backes, A. Kate, M. Maffe, and K. Pecina. Obliviad: Provably secure and practical online behavioral advertising. In S & P, 2012.
9. D. Boneh, D. Mazieres, and R. A. Popa. Remote oblivious storage: Making oblivious RAM practical. Manuscript, http://dspace.mit.edu/bitstream/handle/ 1721.1/62006/MIT-CSAIL-TR-2011-018.pdf, 2011.
10. R. Chow, P. Golle, M. Jakobsson, E. Shi, J. Staddon, R. Masuoka, and J. Molina. Controlling data in the cloud: outsourcing computation without outsourcing control. In CCSW, 2009.
11. I. Damgård, S. Meldgaard, and J. B. Nielsen. Perfectly secure oblivious RAM without random oracles. In TCC, 2011.
12. C. W. Fletcher, M. v. Dijk, and S. Devadas. A secure processor architecture for encrypted computation on untrusted programs. In STC, 2012.
13. O. Goldreich. Towards a theory of software protection and simulation by oblivious RAMs. In STOC, 1987.
14. O. Goldreich and R. Ostrovsky. Software protection and simulation on oblivious RAMs. J. ACM, 1996.
15. M. T. Goodrich and M. Mitzenmacher. Privacy-preserving access of outsourced data via oblivious RAM simulation. In ICALP, 2011.
16. M. T. Goodrich, M. Mitzenmacher, O. Ohrimenko, and R. Tamassia. Oblivious RAM simulation with efficient worst-case access overhead. In ACM Cloud Computing Security Workshop (CCSW), 2011.
17. M. T. Goodrich, M. Mitzenmacher, O. Ohrimenko, and R. Tamassia. Practical oblivious storage. In CODASPY, 2012.
18. M. T. Goodrich, M. Mitzenmacher, O. Ohrimenko, and R. Tamassia. Privacy-preserving group data access via stateless oblivious RAM simulation. In SODA, 2012.
19. A. Iliev and S. Smith. Towards tiny trusted third parties. Technical report, 2005.
20. A. Iliev and S. W. Smith. Protecting client privacy with trusted computing at the server. IEEE Security and Privacy, 3(2):20-28, Mar. 2005. (Pubitemid 40542058)
21. M. Islam, M. Kuzu, and M. Kantarcioglu. Access pattern disclosure on searchable encryption: Ramification, attack and mitigation. In Network and Distributed System Security Symposium (NDSS), 2012.
22. G. Klein, K. Elphinstone, G. Heiser, J. Andronick, D. Cock, P. Derrin, D. Elkaduwe, K. Engelhardt, R. Kolanski, M. Norrish, T. Sewell, H. Tuch, and S. Winwood. sel4: formal verification of an os kernel. In SOSP, 2009.
23. E. Kushilevitz, S. Lu, and R. Ostrovsky. On the (in)security of hash-based oblivious RAM and a new balancing scheme. In SODA, 2012.
24. J. Liedtke. On micro-kernel construction. In SOSP, 1995.
25. J. R. Lorch, B. Parno, J. W. Mickens, M. Raykova, and J. Schiffman. Shroud: Ensuring private access to large-scale data in the data center. FAST, 2013:199-213, 2013.
26. J. M. McCune, Y. Li, N. Qu, Z. Zhou, A. Datta, V. D. Gligor, and A. Perrig. Trustvisor: Efficient TCB reduction and attestation. In S & P, 2010.
27. J. M. McCune, B. Parno, A. Perrig, M. K. Reiter, and H. Isozaki. Flicker: An execution infrastructure for TCB minimization. In EuroSys, 2008.
28. R. Ostrovsky. Efficient computation on oblivious RAMs. In ACM Symposium on Theory of Computing (STOC), 1990.
29. R. Ostrovsky and V. Shoup. Private information storage (extended abstract). In STOC, pages 294-303, 1997.
30. D. Perry. SSD prices falling faster than HDD prices. http://www. tomshardware.com/news/ssd-hdd-solid-state-drive-hard-disk-drive-prices,14336. html, 2011.
31. B. Pinkas and T. Reinman. Oblivious RAM revisited. In CRYPTO, 2010.
32. R. Sailer, X. Zhang, T. Jaeger, and L. van Doorn. Design and implementation of a TCG-based integrity measurement architecture. In USENIX Security Symposium, 2004.
33. N. Santos, R. Rodrigues, K. P. Gummadi, and S. Saroiu. Policy-sealed data: a new abstraction for building trusted cloud services. In Usenix Security, 2012.
34. J. Schiffman, T. Moyer, H. Vijayakumar, T. Jaeger, and P. McDaniel. Seeding clouds with trust anchors. In CCSW, pages 43-46, 2010.
35. 3) worst-case cost. In ASIACRYPT, pages 197-214, 2011.
36. S. W. Smith. Outbound authentication for programmable secure coprocessors. In ESORICS, 2002.
37. S. W. Smith and D. Safford. Practical server privacy with secure coprocessors. IBM Syst. J., 40(3):683-695, Mar. 2001. (Pubitemid 32933425)
38. S. W. Smith and S. Weingart. Building a high-performance, programmable secure coprocessor. Comput. Netw., 31(9):831-860, 1999.
39. E. Stefanov and E. Shi. ObliviStore: High performance oblivious cloud storage. Technical report.
40. E. Stefanov, E. Shi, and D. Song. Towards practical oblivious RAM. In NDSS, 2012.
41. E. Stefanov, M. van Dijk, A. Oprea, and A. Juels. Iris: A scalable cloud file system with efficient integrity checks. In ACSAC, 2012.
42. U. Steinberg and B. Kauer. Nova: a microhypervisor-based secure virtualization architecture. In EuroSys, 2010.
43. P. Williams and R. Sion. Usable PIR. In NDSS, 2008.
44. P. Williams and R. Sion. Round-optimal access privacy on outsourced storage. In CCS, 2012.
45. P. Williams and R. Sion. Single round access privacy on outsourced storage. In CCS, 2012.
46. P. Williams, R. Sion, and B. Carbunar. Building castles out of mud: practical access pattern privacy and correctness on untrusted storage. In CCS, 2008.
47. P. Williams, R. Sion, and A. Tomescu. Privatefs: A parallel oblivious file system. In CCS, 2012.
48. K. Zhang, X. Zhou, Y. Chen, X. Wang, and Y. Ruan. Sedic: privacy-aware data intensive computing on hybrid clouds. In CCS, 2011.