Towards end-to-end secure content storage and delivery with public cloud

CODASPY'12 - Proceedings of the 2nd ACM Conference on Data and Application Security and Privacy

Volumn , Issue , 2012, Pages 257-266

  Xiong, Huijun ^a   Zhang, Xinwen ^b   Yao, Danfeng ^a   Wu, Xiaoxin ^b   Wen, Yonggang ^c  

^a VIRGINIA POLYTECHNIC INSTITUTE AND STATE UNIVERSITY   (United States)

^b HUAWEI TECHNOLOGIES CO LTD   (China)

^c NANYANG TECHNOLOGICAL UNIVERSITY   (Singapore)

Author keywords

cloud computing; cloud storage; confidentiality; content distribution; proxy based re encryption; security

Indexed keywords

ACCESS CONTROL; CRYPTOGRAPHY; NETWORK SECURITY; WEB SERVICES;

CLOUD ENVIRONMENTS; CLOUD STORAGES; CLOUD-COMPUTING; CONFIDENTIALITY; CONTENT DISTRIBUTION; END TO END; KEY-MANAGEMENT; PROXY BASED RE ENCRYPTIONS; PUBLIC CLOUDS; SECURITY;

CLOUD STORAGE;

EID: 84884706447     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2133601.2133633     Document Type: Conference Paper

References (38)

1. Amazon Web Services. http://aws. amazon. com.
2. boto: Python interface to amazon web services. http://code. google. com/p/boto/.
3. Netflix on Amazon's Cloud. http://www. Techflash. com/seattle/2010/05/netflix_on_amazon_cloud. html.
4. OpenSSL Cryptography and SSL/TLS Tookit, http://www. openssl. org/.
5. Pairing-based cryptography (pbc) library. http://crypto. stanford. edu/pbc/
6. Cloud Computing, an IDC update, 2010.
7. AWS Customer Agreement http://aws. amazon. com/agreement/, 2011.
8. G. Ateniese, K. Fu, M. Green, and S. Hohenberger. Improved Proxy Re-encryption Schemes with Applications to Secure Distributed Storage. ACM Trans. Inf. Syst. Secur., 9: 1-30, February 2006.
9. E. Bertino, F. Paci, R. Ferrini, and N. Shang. Privacy-preserving Digital Identity Management for Cloud Computing. IEEE Data Eng. Bull., 2009.
10. D. Boneh and M. K. Franklin. Identity-based Encryption from the Weil Pairing. In CRYPTO '01.
11. D. Boneh, B. Lynn, and H. Shacham. Short Signatures from the Weil Pairing. In Proc. of ASIACRYPT '01.
12. B. Briscoe. MARKS: Multicast Key Management using Arbitratily Revealed Key Sequences. In Proceedings of NGC'99.
13. B. Briscoe. Nark: Receiver-based Multicast Non-repudiation and Key Management. In Proceedings of EC'99.
14. R. Canetti, J. Garay, G. Itkis, D. Micciancio, M. Naor, and B. Pinkas. Multicast Security: A Taxonomy and Some Efficient Constructions. In INFOCOM '99.
15. Y.-P. Chiu, C.-L. Lei, and C.-Y. Huang. Secure Multicast Using Proxy Encryption. In Information and Communications Security, Lecture Notes in Computer Science. 2005.
16. R. Chow, P. Golle, M. Jakobsson, E. Shi, J. Staddon, R. Masuoka, and J. Molina. Controlling Data in the Cloud: Outsourcing Computation without Outsourcing Control. In Proceedings of CCSW '09.
17. V. Goyal, O. Pandey, A. Sahai, and B. Waters. Attribute-based Encryption for Fine-grained Access Control of Encrypted Data. In Proc. of ACM CCS, 2006.
18. Cisco Inc. Cisco Visual Networking Index: Forecast and Methodology, 2010-2015. White paper, Cisco., 2011.
19. M. Kallahalla, E. Riedel, R. Swaminathan, Q. Wang, and K. Fu. Plutus: Scalable Secure File Sharing on Untrusted Storage. In Proceedings of FAST, 2003.
20. Y. Koglin, D. Yao, and E. Bertino. Secure Content Distribution by Parallel Processing from Cooperative Intermediaries. IEEE Transactions on Parallel and Distributed Systems, 2008.
21. D. Lin and A. Squicciarini. Data Protection Models for Service Provisioning in the Cloud. In Proceeding of ACM SACMAT '10.
22. Lockheed Martin, LM Cyber Security Alliance. Awareness, Trust and Security to Shape Government Cloud Adoption. White paper, Cisco, 2010.
23. M. Nabeel, N. Shang, J. Zage, and E. Bertino. Mask: A System for Privacy-preserving Policy-based Access to Published Content. In Proceedings of SIGMOD '10.
24. M. Naor and B. Pinkas. Efficient Trace and Revoke Schemes. In Proceedings of the 4th International Conference on Financial Cryptography, 2001.
25. Pomelo, LLC Tech Memo. Analysis of Netflix's Security Framework for Watch Instantly Service, 2009.
26. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage. Hey, You, Get Off of My cloud! Exploring Information Leakage in Third-Party Compute Clouds. In Proceedings of CCS, 2009.
27. R. Sandhu, R. Boppana, R. Krishnan, J. Reich, T. Wolff, and J. Zachry. Towards A Discipline of Mission-aware Cloud Computing. In Proceedings of the 2010 ACM workshop on Cloud computing security workshop, CCSW '10.
28. Cloud Security Alliance. Security Guidance for Critical Areas of Focus in Cloud Computing V2. 1, 2009. https://cloudsecurityalliance. org/csaguide. pdf.
29. A. Shamir. How to Share A Secret. Commun. ACM, 22, November 1979.
30. P. Traynor, K. R. B. Butler, W. Enck, and P. McDaniel. Realizing Massive-Scale Conditional Access Systems Through Attribute-Based Cryptosystems. In NDSS, 2008.
31. W. Wang, Z. Li, R. Owens, and B. Bhargava. Secure and Efficient Access to Outsourced Data. In Proceedings of CCSW '09.
32. C. K. Wong, M. Gouda, and S. S. Lam. Secure Group Communications Using Key Graphs. IEEE/ACM Trans. Netw., 8, February 2000.
33. H. Xiong, X. Zhang, W. Zhu, and D. Yao. Cloudseal: End-to-End Content Protection in Cloud-based Storage and Delivery Services. In Proceedings of Securecomm, 2011.
34. D. Yao, Y. Koglin, E. Bertino, and R. Tamassia. Decentralized Authorization and Data Security in Web Content Delivery. In Proc ACM Symp. on Applied Computing (SAC), 2007.
35. S. Yu, C. Wang, K. Ren, and W. Lou. Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing. In INFOCOM'10.
36. S. Zarandioon, D. Yao, and V. Ganapathy. K2C: Cryptographic Cloud Storage With Lazy Revocation and Anonymous Access. In Proceedings of Securecomm, 2011.
37. L. Zhou, V. Varadharajan, and M. Hitchens. Enforcing role-based access control for secure data storage in the cloud. The Computer Journal, 2011.
38. S. Zhu, C. Yao, D. Liu, S. Setia, and S. Jajodia. Efficient Security Mechanisms for Overlay Multicast based Content Delivery. Comput. Commun., 30: 793-806, February 2007.