Three-Server Swapping for Access Confidentiality

IEEE Transactions on Cloud Computing

Volumn 6, Issue 2, 2018, Pages 492-505

  De Capitani Di Vimercati, Sabrina ^a   Foresti, Sara ^a   Paraboschi, Stefano ^b   Pelosi, Gerardo ^c   Samarati, Pierangela ^a  

^a UNIVERSITY OF MILAN   (Italy)

^b UNIVERSITY OF BERGAMO   (Italy)

^c POLITECNICO DI MILANO   (Italy)

Author keywords

access confidentiality; content confidentiality; distributed swapping; pattern confidentiality; Shuffle index

Indexed keywords

COMPUTER PROGRAMMING;

ACCESS CONFIDENTIALITY; CONTENT CONFIDENTIALITY; DISTRIBUTED SWAPPING; PATTERN CONFIDENTIALITY; SHUFFLE INDEX;

COMPUTER SCIENCE;

EID: 85048246767     PISSN: None     EISSN: 21687161     Source Type: Journal    
DOI: 10.1109/TCC.2015.2449993     Document Type: Article

References (23)

1. S. De Capitani di Vimercati, S. Foresti, S. Paraboschi, G. Pelosi, and P. Samarati, "Efficient and private access to outsourced data," in Proc. 31st Int. Conf. Distrib. Comput. Syst., Minneapolis, MN, USA, Jun. 2011, pp. 710-719.
2. M. Islam, M. Kuzu, and M. Kantarcioglu, "Inference attack against encrypted range queries on outsourced databases," in Proc. 4th ACM Conf. Data Appl. Security Privacy, San Antonio, TX, USA, Mar. 2014, pp. 235-246.
3. H. Pang, J. Zhang, and K. Mouratidis, "Enhancing access privacy of range retrievals over B+-trees," IEEE Trans. Knowl. Data Eng., vol. 25, no. 7, pp. 1533-1547, Jul. 2013.
4. P. Samarati and S. De Capitani di Vimercati, "Data protection in outsourcing scenarios: Issues and directions," in Proc. 5th ACM Symp. Inf., Comput. Commun. Security, Beijing, China, Apr. 2010, pp. 1-14.
5. V. Ciriani, S. De Capitani di Vimercati, S. Foresti, S. Jajodia, S. Paraboschi, and P. Samarati, "Combining fragmentation and encryption to protect privacy in data storage," ACM Trans. Inf. Syst. Security, vol. 13, no. 3, pp. 22:1-22:33, 2010.
6. R. Jhawar, V. Piuri, and P. Samarati, "Supporting security requirements for resource management in cloud computing," in Proc. 15th Int. Conf. Comput. Sci. Eng., Paphos, Cyprus, Dec. 2012, pp. 170-177.
7. F. Hu, M. Qiu, J. Li, T. Grant, D. Tylor, S. McCaleb, L. Butler, and R. Hamner, "A review on cloud computing: Design challenges in architecture and security," Comput. Inf. Technol., vol. 19, no. 1, pp. 25-55, 2011.
8. H. Hacig€um€us, B. Iyer, S. Mehrotra, and C. Li, "Executing SQL over encrypted data in the database-service-provider model," in Proc. ACM SIGMOD Int. Conf. Manag. Data, Madison, WI, USA, Jun. 2002, pp. 216-227.
9. C. Wang, N. Cao, K. Ren, and W. Lou, "Enabling secure and efficient ranked keyword search over outsourced cloud data," IEEE Trans. Parallel Distrib. Process. Syst., vol. 23, no. 8, pp. 1467-1479, Aug. 2012.
10. R. Ostrovsky and W. E. Skeith, III, "A survey of single-database private information retrieval: Techniques and applications," in Proc. 10th Int. Conf. Practice Theory Public-Key Cryptography, Beijing, China, Apr. 2007, pp. 393-411.
11. C. Cachin, S. Micali, and M. Stadler, "Computationally private information retrieval with polylogarithmic communication," in Proc. Int. Conf. Theory Appl. Cryptographic Tech., Prague, Czech Republic, May 1999, pp. 402-414.
12. P. Williams, R. Sion, and B. Carbunar, "Building castles out of mud: Practical access pattern privacy and correctness on untrusted storage," in Proc. 15th ACM Conf. Comput. Commun. Security, Alexandria, VA, USA, October 2008, pp. 139-148.
13. E. Stefanov and E. Shi, "ObliviStore: High performance oblivious cloud storage," in Proc. IEEE Symp. Security Privacy, San Francisco, CA, USA, May 2013, pp. 253-267.
14. E. Stefanov, M. van Dijk, E. Shi, C. Fletcher, L. Ren, X. Yu, and S. Devadas, "Path ORAM: An extremely simple Oblivious RAM protocol," in Proc. ACM SIGSAC Conf. Comput. Commun. Security, Berlin, Germany, Nov. 2013, pp. 299-310.
15. O. Ohrimenko, M. Goodrich, R. Tamassia, and E. Upfal, "The Melbourne shuffle: Improving oblivious storage in the cloud," in Proc. 41st Int. Colloquium Automata, Languages, Program., Copenhagen, Denmark, Jul. 2014, pp. 556-567.
16. S. Lu and R. Ostrovsky, "Distributed oblivious RAM for secure two-party computation," in Proc. 10th Theory Cryptography Conf., Tokyo, Japan, Mar. 2013, pp. 377-396.
17. E. Stefanov and E. Shi, "Multi-cloud oblivious storage," in Proc. ACM SIGSAC Conf. Comput. Commun. Security, Berlin, Germany, Nov. 2013, pp. 247-258.
18. P. Lin and K. Candan, "Hiding traversal of tree structured data from untrusted data stores," in Proc. 2nd Int. Workshop Security Inf. Syst., Porto, Portugal, Apr. 2004, pp. 314-323.
19. K. Yang, J. Zhang, W. Zhang, and D. Qiao, "A light-weight solution to preservation of access pattern privacy in un-trusted clouds," in Proc. 16th Eur. Symp. Res. Comput. Security, Leuven, Belgium, Sep. 2011, pp. 528-547.
20. S. De Capitani di Vimercati, S. Foresti, S. Paraboschi, G. Pelosi, and P. Samarati, "Distributed shuffling for preserving access confidentiality," in Proc. 18th Eur. Symp. Res. Comput. Security, Egham, U.K., 2013, pp. 628-645.
21. S. De Capitani di Vimercati, S. Foresti, S. Paraboschi, G. Pelosi, and P. Samarati, "Supporting concurrency and multiple indexes in private access to outsourced data," J. Comput. Security, vol. 21, no. 3, pp. 425-461, 2013.
22. S. De Capitani di Vimercati, S. Foresti, S. Paraboschi, G. Pelosi, and P. Samarati, "Protecting access confidentiality with data distribution and swapping," in Proc. IEEE 4th Int. Conf. Big Data Cloud Comput., Sydney, Australia, Dec. 2014, pp. 167-174.
23. G. Aggarwal, M. Bawa, P. Ganesan, H. Garcia-molina, K. Kenthapadi, R. Motwani, U. Srivastava, D. Thomas, and Y. Xu, "Two can keep a secret: A distributed architecture for secure database services," presented at the 2nd Biennial Conf. Innovative Data Syst. Res., Asilomar, CA, USA, Jan. 2005.