Method for sensitive data protection of web servers in the cloud

Qinghua Daxue Xuebao/Journal of Tsinghua University

Volumn 56, Issue 1, 2016, Pages

  Han, Xinhui ^a   Wang, Dongqi ^a   Chen, Zhaofeng ^a   Zhang, Huilin ^a  

^a PEKING UNIVERSITY   (China)

Author keywords

Data protection; Server; Trusted computing

Indexed keywords

APPLICATION PROGRAMS; CODES (SYMBOLS); CRYPTOGRAPHY; DATA PRIVACY; SERVERS; TRUSTED COMPUTING; WEB SERVICES;

APPLICATION CODES; DATA ENCRYPTION; MALICIOUS CODES; SENSITIVE DATA PROTECTIONS; SENSITIVE DATAS; SERVER SOFTWARES; VIRTUALIZATIONS; WEB APPLICATION;

WORLD WIDE WEB;

EID: 84959149394     PISSN: 10000054     EISSN: None     Source Type: Journal    
DOI: 10.16511/j.cnki.qhdxxb.2016.23.007     Document Type: Article

References (19)

1. The OWASP Foundation. Top 10 2013-A6-Sensitive Data Exposure [EB/OL]. (2013-02). https://www.owasp.org/index.php/Top_10_2013-A6-Sensitive_Data_Exposure.
2. Verizon. 2013 Data Breach Investigations Report [EB/OL]. (2013). http://www.verizonenterprise.com/resources/reports/rp_data-breach-investigations-report-2013_en_xg.pdf.
3. Popa R A, Redfield C, Zeldovich N, et al. Cryptdb: Protecting confidentiality with encrypted query processing [C]// Proceedings of the 23rd ACM Symposium on Operating Systems Principles. New York, NY: ACM Press, 2011: 85-100.
4. Puttaswamy K P N, Kruegel C, Zhao B Y. Silverline: Toward data confidentiality in storage-intensive cloud applications [C]// Proceedings of the 2nd ACM Symposium on Cloud Computing. New York, NY: ACM Press, 2011: 10.
5. Parno B, McCune J M, Wendlandt D, et al. CLAMP: Practical prevention of large-scale data leaks [C]// Security and Privacy, 2009 30th IEEE Symposium on. Piscataway, NJ: IEEE Press, 2009: 154-169.
6. Felt A P, Finifter M, Weinberger J, et al. Diesel: Applying privilege separation to database access [C]// Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security. New York: ACM Press, 2011: 416-422.
7. Lampson B, Abadi M, Burrows M, et al. Authentication in distributed systems: Theory and practice [J]. ACM Transactions on Computer Systems (TOCS), 1992, 10(4): 265-310.
8. Wikipedia. Trusted computing base [EB/OL]. (2002-02). http://en.wikipedia.org/wiki/Trusted_computing_base.
9. Howard M. Attack surface: Mitigate security risks by minimizing the code you expose to untrusted users [EB/OL]. (2004-11). http://msdn.microsoft.com/en-us/magazine/cc163882.aspx.
10. McCune J M, Parno B J, Perrig A, et al. Flicker: An execution infrastructure for TCB minimization [J]. ACM SIGOPS Operating Systems Review, 2008, 42(4): 315-328.
11. Dworkin M. Recommendation for block cipher modes of operation: Galois/counter mode (GCM) and GMAC [R]. Gaithersburg: US Department of Commerce, National Institute of Standards and Technology, 2007.
12. McGrew D, Viega J. The Galois/counter mode of operation (GCM) [EB/OL]. (2004). http://siswg.net/docs/gcm_spec.pdf.
13. Wikipedia. Block cipher mode of operation [EB/OL]. (2014-05). http://en.wikipedia.org/wiki/Block_cipher_mode_of_operation.
14. Gueron S, Kounavis M E. Intel? carry-less multiplication instruction and its usage for computing the GCM mode, Intel white paper [R]. 2012.
15. W3Techs. Usage of server-side programming languages for websites [EB/OL]. (2014-04). http://w3techs.com/technologies/overview/programming_language/all.
16. Gueron S. AES-GCM for efficient authenticated encryption: Ending the reign of HMAC-SHA-1? [C]// Workshop on Real-World Cryptography. Stanford: Stanford Univ, 2013.
17. The PHP Group. vld Package Information [EB/OL]. (2003-09). http://pecl.php.net/package/vld.
18. Crawljax. Crawling Ajax-based Web Applications [EB/OL]. (2007-10). http://crawljax.com.
19. Computer Science Department at the University of Illinois at Urbana-Champaign. The LLVM Compiler Infrastructure [EB/OL]. (2002-06). http://llvm.org.