Secure and privacy-preserving database services in the cloud

Proceedings - International Conference on Data Engineering

Volumn , Issue , 2013, Pages 1268-1271

  Agrawal, Divyakant ^a   El Abbadi, Amr ^a   Wang, Shiyuan ^a  

^a University of California   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD SECURITIES; DATA CONFIDENTIALITY; DATA SECURITY AND PRIVACY; DATABASE SERVICE; PRIVACY PRESERVING; RECENT RESEARCHES; SECURITY AND PRIVACY; STATE-OF-THE-ART SCHEME;

INFORMATION MANAGEMENT; QUERY PROCESSING;

DIGITAL STORAGE;

EID: 84881362635     PISSN: 10844627     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICDE.2013.6544921     Document Type: Conference Paper

References (41)

1. "AWS Solution Providers," http://aws.amazon.com/solutions/ solution-providers/, 2009.
2. "AWS Case Studies," http://aws.amazon.com/solutions/case- studies/, 2009.
3. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage, "Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds," in ACM Conference on Computer and Communications Security, 2009, pp. 199-212.
4. J. Somorovsky, M. Heiderich, M. Jensen, J. Schwenk, N. Gruschka, and L. Lo Iacono, "All your clouds are belong to us: security analysis of cloud management interfaces," in Proceedings of the 3rd ACM workshop on Cloud computing security workshop, ser. CCSW '11. New York, NY, USA: ACM, 2011, pp. 3-14.
5. D. McCullagh, "Privacy leaks hit facebook, google, at&t," http://news.cnet.com/2702-1009 3-986.html, 2010.
6. M. J. Schwartz, "Twitter finalizes ftc security settlement," http://www.informationweek.com/news/security/attacks/229301037, 2011.
7. A. W. Services, "Amazon web services: Overview of security processes," Amazon, Tech. Rep., 2011.
8. D. X. Song, D. Wagner, and A. Perrig, "Practical techniques for searches on encrypted data," in SP '00: Proceedings of the 2000 IEEE Symposium on Security and Privacy, 2000, pp. 44-55.
9. H. Hacigumus, B. R. Iyer, C. Li, and S. Mehrotra, "Executing SQL over encrypted data in the database service provider model," in Proceedings of the ACM SIGMOD international conference on Management of data, 2002, pp. 216-227. [Online]. Available: citeseer.ist.psu.edu/hacigumus02executing.html
10. B. Hore, S. Mehrotra, and G. Tsudik, "A privacy-preserving index for range queries," in Proc. of the 30th Int'l Conference on Very Large Databases VLDB, 2004, pp. 720-731.
11. R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu, "Order preserving encryption for numeric data," in SIGMOD '04: Proceedings of the 2004 ACM SIGMOD international conference on Management of data, 2004, pp. 563-574.
12. R. A. Popa, C. M. S. Redfield, N. Zeldovich, and H. Balakrishnan, "CryptDB: protecting confidentiality with encrypted query processing," in Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles, ser. SOSP '11, 2011, pp. 85-100.
13. E. Damiani, S. D. C. di Vimercati, S. Jajodia, S. Paraboschi, and P. Samarati, "Balancing confidentiality and efficiency in untrusted relational dbmss," in ACM Conference on Computer and Communications Security, 2003, pp. 93-102.
14. E. Shmueli, R. Waisenberg, Y. Elovici, and E. Gudes, "Designing secure indexes for encrypted databases," in Proceedings of the IFIP Conference on Database and Applications Security, 2005, pp. 54-68.
15. T. Ge and S. B. Zdonik, "Fast, secure encryption for indexing in a column-oriented dbms," in Proceedings of the International Conference on Data Engineering, 2007, pp. 676-685.
16. S. Wang, D. Agrawal, and A. El Abbadi, "A comprehensive framework for secure query processing on relational data in the cloud," in Proceedings of the 8th VLDB international conference on Secure data management, ser. SDM'11. Berlin, Heidelberg: Springer-Verlag, 2011, pp. 52-69.
17. P. Paillier, "Public-key cryptosystems based on composite degree residuosity classes," in Advances in Cryptology - EUROCRYPT '99, ser. Lecture Notes in Computer Science, vol. 1592. Springer Berlin / Heidelberg, 1999, pp. 223-238.
18. T. Ge and S. B. Zdonik, "Answering aggregation queries in a secure system model," in Proceedings of the 33rd International Conference on Very Large Data Bases, 2007, pp. 519-530.
19. C. Gentry, "Fully homomorphic encryption using ideal lattices," in STOC '09: Proceedings of the 41st annual ACM symposium on Theory of computing, 2009, pp. 169-178.
20. -, "Computing arbitrary functions of encrypted data," Commun. ACM, vol. 53, pp. 97-105, 2010.
21. M. Naehrig, K. Lauter, and V. Vaikuntanathan, "Can homomorphic encryption be practical?" in Proceedings of the 3rd ACM workshop on Cloud computing security workshop, ser. CCSW '11. New York, NY, USA: ACM, 2011, pp. 113-124.
22. S. Bajaj and R. Sion, "TrustedDB: a trusted hardware based database with privacy and data confidentiality," in Proceedings of the 2011 international conference on Management of data, ser. SIGMOD '11, 2011, pp. 205-216.
23. D. Song, E. Shi, I. Fischer, and U. Shankar, "Cloud data protection for the masses," IEEE Computer, vol. 45, no. 1, pp. 39-45, 2012.
24. N. Santos, K. P. Gummadi, and R. Rodrigues, "Towards trusted cloud computing," in Proceedings of the 2009 conference on Hot topics in cloud computing, ser. HotCloud'09. Berkeley, CA, USA: USENIX Association, 2009.
25. A. Arasu, S. Blanas, K. Eguro, R. Kaushik, D. Kossmann, R. Ramamurthy, and R. Venkatesan, "Orthogonal security with cipherbase," in CIDR.
26. B. Chor, E. Kushilevitz, O. Goldreich, and M. Sudan, "Private information retrieval," J. ACM, vol. 45, no. 6, pp. 965-981, 1998.
27. R. Ostrovsky, "Efficient computation on oblivious RAMs," in Proceedings of the twenty-second annual ACM symposium on Theory of computing, ser. STOC '90, 1990, pp. 514-523.
28. E. Kushilevitz and R. Ostrovsky, "Replication is not needed: Single database, computationally-private information retrieval," in Proceedings of the Anuual Symposium on Foundations of Computer Science (FOCS), 1997, pp. 364-373.
29. R. Sion and B. Carbunar, "On the computational practicality of private information retrieval," in Network and Distributed System Security Symposium, 2007.
30. C. A. Melchor and P. Gaborit, "A fast private information retrieval protocol," in IEEE Internal Symposium on Information Theory, 2008, pp. 1848-1852.
31. F. G. Olumofin and I. Goldberg, "Revisiting the computational practicality of private information retrieval," in Proceedings of the 15th international conference on Financial Cryptography and Data Security, 2011, pp. 158-172.
32. P. Williams and R. Sion, "Usable private information retrieval," in Network and Distributed System Security Symposium, 2008.
33. P. Williams, R. Sion, and B. Carbunar, "Building castles out of mud: practical access pattern privacy and correctness on untrusted storage," in ACM Conference on Computer and Communications Security, 2008, pp. 139-148.
34. E. Stefanov, E. Shi, and D. Song, "Towards practical oblivious RAM," CoRR, vol. abs/1106.3652, 2011.
35. S. De Capitani di Vimercati, S. Foresti, S. Paraboschi, G. Pelosi, and P. Samarati, "Efficient and private access to outsourced data," in Proc. of the 31st International Conference on Distributed Computing Systems (ICDCS 2011), June 2011, pp. 710-719.
36. S. Wang, D. Agrawal, and A. E. Abbadi, "Generalizing pir for practical private retrieval of public data," in Proceedings of the 24th annual IFIP WG 11.3 working conference on Data and applications security and privacy (DBSec). Berlin, Heidelberg: Springer-Verlag, 2010, pp. 1-16.
37. F. G. Olumofin, P. K. Tysowski, I. Goldberg, and U. Hengartner, "Achieving efficient query privacy for location based services," in Privacy Enhancing Technologies, 2010, pp. 93-110.
38. S. Wang, D. Agrawal, and A. El Abbadi, "Towards practical private processing of database queries over public data," Distributed and Parallel Databases, 2013, to appear.
39. D. Agrawal, A. El Abbadi, and S. Wang, "Secure and privacy-preserving data services in the cloud: A data centric view," Proceedings of the International Conference on Very Large Data Bases (PVLDB), vol. 5, no. 12, pp. 2028-2029, 2012.
40. M. Nabeel, E. Bertino, M. Kantarcioglu, and B. M. Thuraisingham, "Towards privacy preserving access control in the cloud," in CollaborateCom, 2011, pp. 172-180.
41. J. Bacon, D. Evans, D. M. Eyers, M. Migliavacca, P. Pietzuch, and B. Shand, "Enforcing end-to-end application security in the cloud (big ideas paper)," in Proceedings of the ACM/IFIP/USENIX 11th International Conference on Middleware, ser. Middleware '10. Berlin, Heidelberg: Springer-Verlag, 2010, pp. 293-312.