Leakage-abuse attacks against searchable encryption

Proceedings of the ACM Conference on Computer and Communications Security

Volumn 2015-October, Issue , 2015, Pages 668-679

  Cash, David ^a   Grubbs, Paul ^b   Perry, Jason ^c   Ristenpart, Thomas ^d  

^a RUTGERS UNIVERSITY   (United States)

^b Department of Obstetrics Gynecology   (United States)

^c LEWIS UNIVERSITY   (United States)

^d Cornell Tech ^*  (United States)

Author keywords

Leakage; Searchable encryption

Indexed keywords

DATA PRIVACY; LEAKAGE (FLUID); SECURITY OF DATA;

ACTIVE ATTACK; HIGH-EFFICIENCY; PLAINTEXT RECOVERY ATTACKS; PRIOR KNOWLEDGE; PROVABLE SECURITY; REALISTIC SCENARIO; SEARCH CAPABILITIES; SEARCHABLE ENCRYPTIONS;

CRYPTOGRAPHY;

EID: 84954113614     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2810103.2813700     Document Type: Conference Paper

References (20)

1. Enron email dataset. https://www.cs.cmu.edu/~./enron/. Accessed: 2015-05-13.
2. Bitglass. Security, Compliance, and Encryption. http://www.bitglass.com/solutions/salesforce-encryption.
3. D. Cash, J. Jaeger, S. Jarecki, C. S. Jutla, H. Krawczyk, M.-C. Rosu, and M. Steiner. Dynamic searchable encryption in very-large databases: Data structures and implementation. In NDSS 2014, San Diego, California, USA, Feb. 23-26, 2014. The Internet Society.
4. D. Cash, S. Jarecki, C. S. Jutla, H. Krawczyk, M.-C. Rosu, and M. Steiner. Highly-scalable searchable symmetric encryption with support for boolean queries. In R. Canetti and J. A. Garay, editors, CRYPTO 2013, Part I, volume 8042 of LNCS, pages 353-373, Santa Barbara, CA, USA, Aug. 18-22, 2013. Springer, Berlin, Germany.
5. CipherCloud. Cloud Data Encryption. http://www.ciphercloud.com/technologies/encryption/.
6. R. Curtmola, J. A. Garay, S. Kamara, and R. Ostrovsky. Searchable symmetric encryption: improved definitions and efficient constructions. In A. Juels, R. N. Wright, and S. Vimercati, editors, ACM CCS 06, pages 79-88, Alexandria, Virginia, USA, Oct. 30 - Nov. 3, 2006. ACM Press.
7. O. Goldreich and R. Ostrovsky. Software protection and simulation on oblivious RAMs. Journal of the ACM, 43(3):431-473, 1996.
8. W. He, D. Akhawe, S. Jain, E. Shi, and D. Song. Shadowcrypt: Encrypted web applications for everyone. In Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, pages 1028-1039. ACM, 2014.
9. M. S. Islam, M. Kuzu, and M. Kantarcioglu. Access pattern disclosure on searchable encryption: Ramification, attack and mitigation. In 19th Annual Network and Distributed System Security Symposium, NDSS 2012. The Internet Society, 2012.
10. S. Kamara and C. Papamanthou. Parallel and dynamic searchable symmetric encryption. In A.-R. Sadeghi, editor, FC 2013, volume 7859 of LNCS, pages 258-274, Okinawa, Japan, Apr. 1-5, 2013. Springer, Berlin, Germany.
11. S. Kamara, C. Papamanthou, and T. Roeder. Dynamic searchable symmetric encryption. In T. Yu, G. Danezis, and V. D. Gligor, editors, ACM CCS 12, pages 965-976, Raleigh, NC, USA, Oct. 16-18, 2012. ACM Press.
12. K. Kurosawa. Garbled searchable symmetric encryption. In N. Christin and R. Safavi-Naini, editors, FC 2014, volume 8437 of LNCS, pages 234-251, Christ Church, Barbados, Mar. 3-7, 2014. Springer, Berlin, Germany.
13. K. Kurosawa and Y. Ohtaki. How to update documents verifiably in searchable symmetric encryption. In M. Abdalla, C. Nita-Rotaru, and R. Dahab, editors, CANS 13, volume 8257 of LNCS, pages 309-328, Paraty, Brazil, Nov. 20-22, 2013. Springer, Berlin, Germany.
14. B. Lau, S. Chung, C. Song, Y. Jang, W. Lee, and A. Boldyreva. Mimesis aegis: A mimicry privacy shield-a systems approach to data privacy on public cloud. In Proceedings of the 23rd USENIX conference on Security Symposium, pages 33-48. USENIX Association, 2014.
15. M. Naveed, M. Prabhakaran, and C. A. Gunter. Dynamic searchable encryption via blind storage. In 2014 IEEE Symposium on Security and Privacy, pages 639-654, Berkeley, California, USA, May 18-21, 2014. IEEE Computer Society Press.
16. W. Ogata, K. Koiwa, A. Kanaoka, and S. Matsuo. Toward practical searchable symmetric encryption. In K. Sakiyama and M. Terada, editors, IWSEC 13, volume 8231 of LNCS, pages 151-167, Okinawa, Japan, 2013. Springer, Berlin, Germany.
17. I. Skyhigh Networks. Skyhigh for Salesforce. https://www.skyhighnetworks.com/product/salesforce-encryption/.
18. D. X. Song, D. Wagner, and A. Perrig. Practical techniques for searches on encrypted data. In 2000 IEEE Symposium on Security and Privacy, Berkeley, California, USA, May 14-17, 2000, pages 44-55. IEEE Computer Society, 2000.
19. D. X. Song, D. Wagner, and A. Perrig. Practical techniques for searches on encrypted data. In 2000 IEEE Symposium on Security and Privacy, pages 44-55, Oakland, California, USA, May 2000. IEEE Computer Society Press.
20. E. Stefanov, C. Papamanthou, and E. Shi. Practical dynamic searchable encryption with small leakage. In NDSS 2014, San Diego, California, USA, Feb. 23-26, 2014. The Internet Society.