MrCrypt: Static analysis for secure cloud computations

ACM SIGPLAN Notices

Volumn 48, Issue 10, 2013, Pages 271-286

  Tetali, Sai Deep ^a   Lesani, Mohsen ^a   Millstein, Todd ^a   Majumdar, Rupak ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b MAX PLANCK INSTITUTE FOR SOFTWARE SYSTEMS   (Germany)

Author keywords

Cloud computing; Data confidentiality; Encryption scheme inference; Homomorphic encryption

Indexed keywords

BENCHMARK SUITES; DATA CONFIDENTIALITY; ENCRYPTED DATA; ENCRYPTION SCHEMES; HADOOP MAPREDUCE; HO-MOMORPHIC ENCRYPTIONS; HOMOMORPHIC ENCRYPTION SCHEMES; INFRASTRUCTURE PROVIDERS; CLOUD-COMPUTING; ENCRYPTION SCHEME INFERENCE; HOMOMORPHIC-ENCRYPTIONS; INPUT DATAS; THIRD PARTIES;

CLOUD COMPUTING; CRYPTOGRAPHY; STATIC ANALYSIS;

SECURITY OF DATA; CLOUD COMPUTING;

EID: 84888805968     PISSN: 15232867     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (43)

1. F. Ahmad, S. Lee, M. Thottethodi, and T. Vijaykumar. Puma: Purdue mapreduce benchmarks suite. Technical Report TR-ECE-12-11, School of Electrical and Computer Engineering, Purdue University, 2012. URL http://docs.lib.purdue. edu/ecetr/437/.
2. O. Baudron, D. Pointcheval, and J. Stern. Extended notions of security for multicast public key cryptosystems. In ICALP'00, volume 1853 of Lecture Notes in Computer Science, pages 499-511. Springer, 2000.
3. M. Bellare, T. Kohno, and C. Namprempre. Authenticated encryption in ssh: provably fixing the ssh binary packet protocol. In CCS'02, pages 1-11. ACM, 2002.
4. M. Bellare, T. Ristenpart, P. Rogaway, and T. Stegers. Formatpreserving encryption. In Selected Areas in Cryptography, volume 5867 of Lecture Notes in Computer Science, pages 295-312. Springer, 2009.
5. A. Boldyreva, N. Chenette, Y. Lee, and A. O'Neill. Orderpreserving symmetric encryption. In EUROCRYPT, volume 5479 of Lecture Notes in Computer Science, pages 224-241. Springer, 2009.
6. A. Boldyreva, N. Chenette, and A. O'Neill. Order-preserving encryption revisited: Improved security analysis and alternative solutions. In CRYPTO, volume 6841 of Lecture Notes in Computer Science, pages 578-595. Springer, 2011.
7. C. Castelluccia, E. Mykletun, and G. Tsudik. Efficient aggregation of encrypted data in wireless sensor networks. In Proceedings of the The Second Annual International Conference on Mobile and Ubiquitous Systems: Networking and Services, MOBIQUITOUS'05, pages 109-117, Washington, DC, USA, 2005. IEEE Computer Society.
8. J. Daemen and V. Rijmen. The design of Rijndael: AES-the advanced encryption standard. Springer, 2002.
9. J. Dean and S. Ghemawat. MapReduce: a flexible data processing tool. Commun. ACM, 53(1):72-77, 2010.
10. T. ElGamal. A public-key cryptosystem and a signature scheme based on discrete logarithms. IEEE Transactions on Information Theory, 31(4):469-472, 1985.
11. J. S. Foster, R. Johnson, J. Kodumal, and A. Aiken. Flowinsensitive type qualifiers. ACM Trans. Program. Lang. Syst., 28(6):1035-1087, November 2006.
12. C. Fournet, J. Planul, and T. Rezk. Information-flow types for homomorphic encryptions. In Proceedings of the 18th ACM conference on Computer and communications security, CCS'11, pages 351-360. ACM, 2011.
13. T. Ge and S. Zdonik. Answering aggregation queries in a secure system model. In Proceedings of the 33rd international conference on Very large data bases, pages 519-530. VLDB Endowment, 2007.
14. C. Gentry. Fully homomorphic encryption using ideal lattices. In STOC 09: Symposium on Theory of Computing. ACM, 2009.
15. C. Gentry. Computing arbitrary functions of encrypted data. Commun. ACM, 53(3):97-105, 2010.
16. C. Gentry and S. Halevi. Implementing Gentry's fullyhomomorphic encryption scheme. In EUROCRYPT 11, volume 6632 of Lecture Notes in Computer Science, pages 129-148. Springer, 2011.
17. S. Goldwasser and S. Micali. Probabilistic encryption. J. Computer and Systems Sciences, 28:270-299, 1984.
18. S. Halevi and P. Rogaway. A tweakable enciphering mode. Advances in Cryptology-CRYPTO 2003, pages 482-499, 2003.
19. M. Hirt and K. Sako. Efficient receipt-free voting based on homomorphic encryption. In Proceedings of the 19th international conference on Theory and application of cryptographic techniques, EUROCRYPT'00, pages 539-556, Berlin, Heidelberg, 2000. Springer-Verlag.
20. E. Kowalski. Insider threat study: Illicit cyber activity in the information technology and telecommunications sector. Technical report, Technical report, U. S. Secret Service and CMU, 2008.
21. M. Lesani, R. Majumdar, T. Millstein, and S. Tetali. MrCrypt: Static analysis for secure cloud (technical report). http://www.cs.ucla.edu/~lesani/ downloads/submission/MrCrypt.pdf.
22. J. Li, M. Krohn, D. Mazières, and D. Shasha. Secure untrusted data repository (sundr). In OSDI 04: Operating Systems Design and Implementation, pages 91-106. ACM, 2004.
23. P. Mahajan, S. Setty, S. Lee, A. Clement, L. Alvisi, M. Dahlin, and M. Walfish. Depot: Cloud storage with minimal trust. In OSDI 10: Operating Systems Design and Implementation. ACM, 2010.
24. J. C. Mitchell, R. Sharma, D. Stefan, and J. Zimmerman. Information-flow control for programming on encrypted data. In Computer Security Foundations Symposium (CSF), 2012 IEEE 25th, pages 45-60. IEEE, 2012.
25. M. Naehrig, K. Lauter, and V. Vaikuntanathan. Can homomorphic encryption be practical? In Proceedings of the 3rd ACM workshop on Cloud computing security workshop, CCSW'11, pages 113-124, New York, NY, USA, 2011. ACM.
26. N. Nystrom, M. Clarkson, and A. Myers. Polyglot: An extensible compiler framework for java. In Compiler Construction, pages 138-152. Springer, 2003.
27. C. Olston, B. Reed, U. Srivastava, R. Kumar, and A. Tomkins. Pig latin: a not-so-foreign language for data processing. In Proceedings of the 2008 ACM SIGMOD international conference on Management of data, SIGMOD'08, pages 1099-1110, New York, NY, USA, 2008. ACM.
28. P. Ørbæk and J. Palsberg. Trust in the λ-calculus. Journal of Functional Programming, 7(6):557-591, November 1997.
29. P. Paillier. Public-key cryptosystems based on composite degree residuosity classes. In EUROCRYPT 99: Theory and Applications of Cryptographic Techniques, 1999.
30. B. Parno, J. M. McCune, D. Wendlandt, D. G. Andersen, and A. Perrig. CLAMP: Practical prevention of large-scale data leaks. In Proceedings of the 2009 30th IEEE Symposium on Security and Privacy, SP'09, pages 154-169, Washington, DC, USA, 2009. IEEE Computer Society.
31. A. Pavlo, E. Paulson, A. Rasin, D. J. Abadi, D. J. DeWitt, S. Madden, and M. Stonebraker. A comparison of approaches to large-scale data analysis. In Proceedings of the 35th SIG-MOD international conference on Management of data, pages 165-178. ACM, 2009.
32. R. A. Popa, C. Redfield, N. Zeldovich, and H. Balakrishnan. CryptDB: protecting confidentiality with encrypted query processing. In Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles, pages 85-100. ACM, 2011.
33. M. Raykova, B. Vo, S. M. Bellovin, and T. Malkin. Secure anonymous database search. In CCSW 09: Cloud Computing Security Workshop, pages 115-126. ACM, 2009.
34. R. Rivest, L. Adleman, and M. L. Dertouzos. On data banks and privacy homomorphisms. In Foundations of Secure Computation, pages 169-179. Academic Press, 1978.
35. I. Roy, S. T. V. Setty, A. Kilzer, V. Shmatikov, and E. Witchel. Airavat: Security and privacy for MapReduce. In NSDI, pages 297-312. USENIX, 2010.
36. A. Sabelfeld and A. C. Myers. Language-based informationflow security. IEEE Journal on Selected Areas in Communications, 21(1):5-19, 2003.
37. 1. In FOCS 99: Foundations of Computer Science. IEEE, 1999.
38. N. Santos, R. Rodrigues, K. P. Gummadi, and S. Saroiu. Policy-sealed data: A new abstraction for building trusted cloud services. In Usenix Security Symposium. USENIX Association, 2012.
39. B. Schneier. Description of a new variable-length key, 64-bit block cipher (blowfish). In Fast Software Encryption, pages 191-204. Springer, 1994.
40. B. Schneier. Applied cryptography. Wiley, 2nd edition, 1996.
41. J. A. Vaughan. Auraconf: a unified approach to authorization and confidentiality. In Proceedings of the 7th ACM SIGPLAN workshop on Types in language design and implementation, TLDI'11, pages 45-58, New York, NY, USA, 2011. ACM.
42. A. K. Wright and M. Felleisen. A syntactic approach to type soundness. Information and Computation, 115(1):38-94, 1994.
43. A. Yao. How to generate and exchange secrets. In FOCS 86: Foundations of Computer Science, pages 162-167. IEEE, 1986.