Inference attacks on property-preserving encrypted databases

Proceedings of the ACM Conference on Computer and Communications Security

Volumn 2015-October, Issue , 2015, Pages 644-655

  Naveed, Muhammad ^a   Kamara, Seny ^b   Wright, Charles V ^c  

^a UIUC   (United States)

^b MICROSOFT RESEARCH   (United States)

^c PORTLAND STATE UNIVERSITY   (United States)

Author keywords

Encrypted databases; Inference attacks; Property preserving encryptio

Indexed keywords

COMBINATORIAL OPTIMIZATION; DISTRIBUTED COMPUTER SYSTEMS; HOSPITAL DATA PROCESSING; HOSPITALS; MEDICAL COMPUTING; QUERY LANGUAGES; RECOVERY; RELATIONAL DATABASE SYSTEMS;

AUXILIARY INFORMATION; COMMERCIAL DATABASE SYSTEM; ELECTRONIC MEDICAL RECORD; ENCRYPTED DATABASE; INFERENCE ATTACKS; PROPERTY-PRESERVING; RELATIONAL DATABASE; SENSITIVE INFORMATIONS;

CRYPTOGRAPHY;

EID: 84954121689     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2810103.2813651     Document Type: Conference Paper

References (39)

1. Fifth Annual Benchmark Study on Privacy and Security of Healthcare Data. http://www.ponemon.org/blog/criminal-attacks-the-new-leading-cause-of-data-breach-in-healthcare. Accessed: 2015-05-15.
2. Google Encrytped Big Query. https://github.com/google/encrypted-bigquery-client.
3. HCUP Databases. Healthcare Cost and Utilization Project (HCUP). 2008-2009. Agency for Healthcare Research and Quality, Rockville, MD. www.hcup-us.ahrq.gov/databases.jsp.
4. Hospital Discharge Data Public Use Data File. http://www.dshs.state.tx.us/THCIC/Hospitals/Download.shtm.
5. Hospital Inpatient Discharges (SPARCS De-Identified): 2012. https://health.data.ny.gov/Health/Hospital-Inpatient-Discharges-SPARCS-De-Identified/u4ud-w55t.
6. OpenEMR. http://www.open-emr.org/. Accessed: 2015-05-15.
7. R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu. Order preserving encryption for numeric data. In SIGMOD, pages 563-574, 2004.
8. I. H. Akin and B. Sunar. On the dificulty of securing web applications using CryptDB. In PriSec, 2014.
9. I. A. Al-Kadit. Origins of cryptology: The Arab contributions. Cryptologia, 16(2):97-126, 1992.
10. A. Arasu, S. Blanas, K. Eguro, R. Kaushik, D. Kossmann, R. Ramamurthy, and R. Venkatesan. Orthogonal security with cipherbase. In CIDR, 2013.
11. M. Bellare, A. Boldyreva, and A. O'Neill. Deterministic and efficiently searchable encryption. In CRYPTO, pages 535-552, 2007.
12. A. Boldyreva, N. Chenette, Y. Lee, and A. O'neill. Order-preserving symmetric encryption. In EUROCRYPT, pages 224-241, 2009.
13. A. Boldyreva, N. Chenette, and A. O'Neill. Order-preserving encryption revisited: improved security analysis and alternative solutions. In CRYPTO, pages 578-595, 2011.
14. D. Boneh, K. Lewi, M. Raykova, A. Sahai, M. Zhandry, and J. Zimmerman. Semantically secure order-revealing encryption: Multi-input functional encryption without obfuscation. In EUROCRYPT, pages 563-594, 2015.
15. D. Boneh, A. Sahai, and B. Waters. Functional encryption: Definitions and challenges. Technical report, TCC, 2011.
16. T. Brekne, A. Ârnes, and A.Øslebø. Anonymization of ip traffic monitoring data: Attacks on two prefix-preserving anonymization schemes and some proposed remedies. In PETs, pages 179-196, 2006.
17. R. Burkard, M. Dell'Amico, and S. Martello. Assignment Problems. Society for Industrial and Applied Mathematics, 2012.
18. D. Cash, P. Grubbs, J. Perry, and T. Ristenpart. Leakage-abuse attacks against searchable encryption. In To appear at the ACM Conference on Communications and Computer Security (CCS'15). ACM, 2015.
19. N. Chenette, A. O'Neill, G. Kollios, and R. Canetti. Modular order-preserving encryption, revisited. 2015.
20. R. Curtmola, J. Garay, S. Kamara, and R. Ostrovsky. Searchable symmetric encryption: Improved Definitions and efficient constructions. In CCS, pages 79-88, 2006.
21. C. Dwork, F. McSherry, K. Nissim, and A. Smith. Calibrating noise to sensitivity in private data analysis. In TCC, pages 265-284. 2006.
22. Y. Elovici, R. Waisenberg, E. Shmueli, and E. Gudes. A structure preserving database encryption scheme. In Secure Data Management, pages 28-40. 2004.
23. C. Gentry. Fully homomorphic encryption using ideal lattices. In STOC, pages 169-169, 2009.
24. O. Goldreich and R. Ostrovsky. Software protection and simulation on oblivious RAMs. JACM, 43(3):431-473, 1996.
25. M. Islam, M. Kuzu, and M. Kantarcioglu. Access pattern disclosure on searchable encryption: ramification, attack and mitigation. In NDSS, 2012.
26. H. Kadhem, T. Amagasa, and H. Kitagawa. Mv-opes: Multivalued-order preserving encryption scheme: A novel scheme for encrypting integer value to many different values. IEICE TRANSACTIONS on Information and Systems, 93(9):2520-2533, 2010.
27. H. Kadhem, T. Amagasa, and H. Kitagawa. A secure and efficient order preserving encryption scheme for relational databases. In KMIS, pages 25-35, 2010.
28. J. Katz and Y. Lindell. Introduction to Modern Cryptography. Chapman & Hall/CRC, 2008.
29. F. Kerschbaum and A. Schroepfer. Optimal average-complexity ideal-security order-preserving encryption. In CCS, pages 275-286, 2014.
30. H. W. Kuhn. The Hungarian method for the assignment problem. Naval Research Logistics Quarterly, 2, 1955.
31. S. Lee, T. Park, D. Lee, T. Nam, and S. Kim. Chaotic order preserving encryption for efficient and secure queries on databases. IEICE transactions on information and systems, 92(11):2207-2217, 2009.
32. A. Menezes, P. van Oorschot, and S. Vanstone. Handbook of Applied Cryptography. CRC Press, 1996.
33. J. Munkres. Algorithms for the assignment and transportation problems. Journal of the Society for Industrial and Applied Mathematics, 5(1), 1957.
34. R. A. Popa, F. H. Li, and N. Zeldovich. An ideal-security protocol for order-preserving encoding. In S&P, pages 463-477, 2013.
35. R. A. Popa, C. Redfield, N. Zeldovich, and H. Balakrishnan. CryptDB: Protecting confidentiality with encrypted query processing. In SOSP, pages 85-100, 2011.
36. T. Sanamrad, L. Braun, D. Kossmann, and R. Venkatesan. Randomly partitioned encryption for cloud databases. In DBSec XXVIII, pages 307-323. 2014.
37. D. Song, D. Wagner, and A. Perrig. Practical techniques for searching on encrypted data. In S&P, pages 44-55, 2000.
38. J. Xu, J. Fan, M. H. Ammar, and S. B. Moon. Prefix-preserving ip address anonymization: Measurement-based security evaluation and a new cryptography-based scheme. In ICNP, pages 280-289, 2002.
39. Z. Yang, S. Zhong, and R. N. Wright. Privacy-preserving queries on encrypted data. In ESORICS, pages 479-495. 2006.