Survey on secure cloud storage

Shuju Caiji Yu Chuli/Journal of Data Acquisition and Processing

Volumn 31, Issue 3, 2016, Pages 464-472

  Xiao, Liang ^a,b   Li, Qiangda ^a   Liu, Jinliang ^a  

^a XIAMEN UNIVERSITY   (China)

^b University of Chinese Academy of Sciences   (China)

Author keywords

Cloud storage; Data deduplication; Data encryption; Integrity audit; Oblivious storage

Indexed keywords

EID: 84975761150     PISSN: 10049037     EISSN: None     Source Type: Journal    
DOI: 10.16337/j.1004-9037.2016.03.005     Document Type: Article

References (56)

1. Zhang Jie, He Liwen, Huang Peiyi, et al. Service discovery architecture applied in cloud computing environments[J]. Journal of Nanjing University of Aeronautics and Astronautics, 2013, 45(4): 556-562.
2. Wu J, Ping L, Ge X, et al. Cloud storage as the infrastructure of cloud computing[C]//International Conference on Intelligent Computing and Cognitive Informatics (ICICCI). Kuala Lumpur: IEEE, 2010: 380-383.
3. Fiveash K. AWS outage knocks Amazon, Netflix, Tinder and IMDb in MEGA data collapse[EB/OL]. http://www.theregister.co.uk/2015/09/20/aws_database_outage/, 2015-09-20.
4. O'Reilly L. Google suffered a rare but major outage early Thursday[EB/OL]. http://www.businessinsider.com/google-is-down-2015-3, 2015-03-12.
5. Neal D. Google SSL certificate update error affects millions of Gmail users[EB/OL]. http://www.v3.co.uk/v3-uk/news/2402863/google-ssl-certificate-update-error-affects-millions-of-gmail-users, 2015-04-07.
6. Li Hui, Sun Wenhai, Li Fenghua, et al. Secure and privacy-preserving data storage service in public cloud[J]. Journal of Computer Research and Development, 2014, 51(7): 1397-1409.
7. Xue Mao, Xue Wei, Shu Jiwu, et al. A secure storage system over cloud storage environment[J]. Chinese Journal of Computers, 2015, 38(5): 987-998.
8. Guo Lei, Hou Weigang. Provident resource defragmentation algorithm for cloud data center network[J]. Journal of Data Acquisition and Processing, 2015, 30(3): 519-527.
9. Bellare M, Keelveedhi S, Ristenpart T. Dupless: Server-aided encryption for deduplicated storage[C]//Proceedings of the 22nd USENIX Conference on Security. Washington D C: USENIX Association, 2013: 179-194.
10. Puzio P, Molva R, Onen M, et al. ClouDedup: Secure deduplication with encrypted data for cloud storage[C]//IEEE 5th International Conference on Cloud Computing Technology and Science (CloudCom). Bristol: IEEE, 2013: 363-370.
11. Stanek J, Sorniotti A, Androulaki E, et al. A secure data deduplication scheme for cloud storage[M]. Financial Cryptography and Data Security. Berlin, Heidelberg: Springer, 2014: 99-118.
12. Liu J, Asokan N, Pinkas B. Secure deduplication of encrypted data without additional independent servers[C]//Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. Denver: ACM, 2015: 874-885.
13. Armknecht F, Bohli J M, Karame G O, et al. Transparent data deduplication in the cloud[C]//Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. Denver: ACM, 2015: 886-900.
14. Goldreich O. Towards a theory of software protection and simulation by oblivious RAMs[C]//Proceedings of the 19th Annual ACM Symposium on Theory of Computing. New York: ACM, 1987: 182-194.
15. Pinkas B, Reinman T. Advances in Cryptology-CRYPTO 2010[M]. Heidelberg: Springer Berlin Heidelberg, 2010: 502-519.
16. Goodrich M T, Mitzenmacher M. Privacy-preserving access of outsourced data via oblivious RAM simulation[M]//Automata, Languages and Programming. Berlin, Heidelberg: Springer, 2011: 576-587.
17. Goodrich M T, Mitzenmacher M, Ohrimenko O, et al. Oblivious RAM simulation with efficient worst-case access overhead[C]//Proceedings of the 3rd ACM Workshop on Cloud Computing Security Workshop. Chicago: ACM, 2011: 95-100.
18. Goodrich M T, Mitzenmacher M, Ohrimenko O, et al. Practical oblivious storage[C]//Proceedings of the second ACM conference on Data and Application Security and Privacy. San Antonio: ACM, 2012: 13-24.
19. Kushilevitz E, Lu S, Ostrovsky R. On the (in) security of hash-based oblivious RAM and a new balancing scheme[C]//Proceedings of the 23rd Annual ACM-SIAM Symposium on Discrete Algorithms. Kyoto: SIAM, 2012: 143-156.
20. Stefanov E, Van Dijk M, Shi E, et al. Path ORAM: An extremely simple oblivious RAM protocol[C]//Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security. Berlin: ACM, 2013: 299-310.
21. Stefanov E, Shi E. Oblivistore: High performance oblivious cloud storage[C]//IEEE Symposium on Security and Privacy (SP). Berkeley: IEEE, 2013: 253-267.
22. Wang X, Chan H, Shi E. Circuit ORAM: On tightness of the goldreich-ostrovsky lower bound[C]//Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. Denver: ACM, 2015: 850-861.
23. Bethencourt J, Sahai A, Waters B. Ciphertext-policy attribute-based encryption[C]// IEEE Symposium on Security and Privacy. Berkeley: IEEE, 2007: 321-334.
24. Cao N, Wang C, Li M, et al. Privacy-preserving multi-keyword ranked search over encrypted cloud data[J]. IEEE Transactions on Parallel and Distributed Systems, 2014, 25(1): 222-233.
25. Juels A, Kaliski Jr B S. PORs: Proofs of retrievability for large files[C]//Proceedings of the 14th ACM Conference on Computer and Communications Security. Alexandria: ACM, 2007: 584-597.
26. Ateniese G, Burns R, Curtmola R, et al. Provable data possession at untrusted stores[C]//Proceedings of the 14th ACM Conference on Computer and Communications Security. Alexandria: ACM, 2007: 598-609.
27. Meyer D T, Bolosky W J. A study of practical deduplication[J]. ACM Transactions on Storage (TOS), 2012, 7(4): 14.
28. Douceur J R, Adya A, Bolosky W J, et al. Reclaiming space from duplicate files in a serverless distributed file system[C]//Proceedings of 22nd International Conference on Distributed Computing Systems. Vienna: IEEE, 2002: 617-624.
29. Storer M W, Greenan K, Long D D E, et al. Secure data deduplication[C]//Proceedings of the 4th ACM International Workshop on Storage Security and Survivability. Alexandria: ACM, 2008: 1-10.
30. Harnik D, Pinkas B, Shulman-Peleg A. Side channels in cloud services: Deduplication in cloud storage[J]. IEEE Security and Privacy, 2010, 8(6): 40-47.
31. Bellovin S M, Merritt M. Encrypted key exchange: Password-based protocols secure against dictionary attacks[C]//Proceedings of IEEE Computer Society Symposium on Research in Security and Privacy. Oakland: IEEE, 1992: 72-84.
32. Bindschaedler V, Naveed M, Pan X, et al. Practicing oblivious access on cloud storage: the gap, the fallacy, and the new way forward[C]//Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. Denver: ACM, 2015: 837-849.
33. Goldreich O, Ostrovsky R. Software protection and simulation on oblivious RAMs[J]. Journal of the ACM (JACM), 1996, 43(3): 431-473.
34. Williams P, Sion R, Tomescu A. Privatefs: A parallel oblivious file system[C]//Proceedings of the ACM Conference on Computer and Communications Security. Raleigh: ACM, 2012: 977-988.
35. Goodrich M T, Mitzenmacher M, Ohrimenko O, et al. Privacy-preserving group data access via stateless oblivious RAM simulation[C]//Proceedings of the 23rd Annual ACM-SIAM Symposium on Discrete Algorithms. Kyoto: SIAM, 2012: 157-167.
36. Boneh D, Mazieres D, Popa R A. Remote oblivious storage: Making oblivious RAM practical[EB/OL]. http://dspace.mit.edu/bitstream/handle/1721.1/62006/MIT-CSAIL-TR-2011-018.pdf, 2011-03-30/2016-02-18.
37. Moataz T, Mayberry T, Blass E O, et al. Financial Cryptography and Data Security[M]. Heidelberg: Springer Berlin Heidelberg, 2015: 147-167.
38. Shi E, Chan T H H, Stefanov E, et al. Advances in Cryptology-ASIACRYPT 2011[M]. Heidelberg: Springer Berlin Heidelberg, 2011: 197-214.
39. Stefanov E, Shi E, Song D. Towards practical oblivious RAM[EB/OL]. Http://arxiv.org/abs/1106.3652, 2012-12-18.
40. Dautrich J, Stefanov E, Shi E. Burst ORAM: Minimizing ORAM response times for bursty access patterns[C]//23rd USENIX Security Symposium. San Diego: [s. n.], 2014: 749-764.
41. Ohrimenko O, Goodrich M T, Tamassia R, et al. Automata, Languages, and Programming[M]. Heidelberg: Springer Berlin Heidelberg, 2014: 556-567.
42. Shamir A. Identity-based cryptosystems and signature schemes[C]//Proceedings of CRYPTO 84 on Advances in Cryptology. New York: Springer-Verlag, 1985: 47-53.
43. Sahai A, Waters B. Advances in Cryptology-EUROCRYPT 2005[M]. Heidelberg: Springer Berlin Heidelberg, 2005: 457-473.
44. Goyal V, Pandey O, Sahai A, et al. Attribute-based encryption for fine-grained access control of encrypted data[C]//Proceedings of the 13th ACM Conference on Computer and Communications Security. Alexandria: ACM, 2006: 89-98.
45. Yang K, Jia X, Ren K, et al. Dac-macs: Effective data access control for multiauthority cloud storage systems[J]. IEEE Transactions on Information Forensics and Security, 2013, 8(11): 1790-1801.
46. Zhu S, Gong G. Fuzzy authorization for cloud storage[J]. IEEE Transactions on Cloud Computing, 2014, 2(4): 422-435.
47. Hardt D. The OAuth 2.0 authorization framework[EB/OL]. Https://www.rfc-editor.org/rfc/rfc6749.txt, 2016-02-18.
48. Li M, Yu S, Ren K, et al. Toward privacy-assured and searchable cloud data storage services[J]. IEEE Network, 2013, 27(4): 56-62.
49. Jung T, Li X Y, Wan Z, et al. Control cloud data access privilege and anonymity with fully anonymous attribute-based encryption[J]. IEEE Transactions on Information Forensics and Security, 2015, 10(1): 190-199.
50. Wong W K, Cheung D W, Kao B, et al. Secure kNN computation on encrypted databases[C]//Proceedings of the 2009 ACM SIGMOD International Conference on Management of Data. [S. l.]: ACM, 2009: 139-152.
51. Yu J, Ren K, Wang C, et al. Enabling cloud storage auditing with key-exposure resistance[J]. IEEE Transactions on Information Forensics and Security, 2015, 10(6): 1167-1179.
52. Wang C, Wang Q, Ren K, et al. Privacy-preserving public auditing for data storage security in cloud computing[C]//Proceedings of the 29th IEEE Conference on Computer Communications. San Diego: IEEE, 2010: 1-9.
53. Zhu Y, Hu H, Ahn G J, et al. Cooperative provable data possession for integrity verification in multicloud storage[J]. IEEE Transactions on Parallel and Distributed Systems, 2012, 23(12): 2231-2244.
54. Zhu Y, Ahn G J, Hu H, et al. Dynamic audit services for outsourced storages in clouds[J]. IEEE Transactions on Services Computing, 2013, 6(2): 227-238.
55. Wei L, Zhu H, Cao Z, et al. Security and privacy for storage and computation in cloud computing[J]. Information Sciences, 2014, 258: 371-386.
56. Bellare M, Miner S K. A forward-secure digital signature scheme[C]//Advances in Cryptology-Crypto'99. Heidelberg: Springer Berlin, 1999: 431-448.