The case of the fake Picasso: Preventing history forgery with secure provenance

Proceedings of the 7th USENIX Conference on File and Storage Technologies, FAST 2009

Volumn , Issue , 2009, Pages 1-14

  Hasan, Ragib ^a   Sion, Radu ^b   Winslett, Marianne ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

^b STONY BROOK UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

REGULATORY COMPLIANCE;

APPLICATION LAYERS; DATA PROVENANCE; MEDICAL DATA; RECORDING PROVENANCE; RIGHTS PROTECTION; RUNTIMES; SYSTEM PROTOTYPE;

DIGITAL STORAGE;

EID: 85062006160     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (60)

1. Monotone Distributed Version Control. Online at http://www.monotone.ca/, accessed on December 22, 2008.
2. N. Agrawal, W. J. Bolosky, J. R. Douceur, and J. R. Lorch. A five-year study of file-system metadata. In Proc. of the 5th USENIX conference on File and Storage Technologies (FAST), Berkeley, CA, USA, 2007. USENIX Assoc.
3. R. Aldeco-Perez and L. Moreau. Provenance-based Auditing of Private Data Use. In Proc. of the BCS International Academic Research Conference, Visions of Computer Science, Sept. 2008.
4. R. S. Barga and L. A. Digiampietri. Automatic generation of workflow provenance. In Moreau and Foster [36], pages 1–9.
5. B. Berliner. CVS II: parallelizing software development. In Proc. of the Winter 1990 USENIX Conference, pages 341–352. USENIX Assoc., 1990.
6. M. Blum. Coin flipping by telephone. In Proc. of Crypto, pages 11–15, 1981.
7. U. Braun, S. L. Garfinkel, D. A. Holland, K.-K. Muniswamy-Reddy, and M. I. Seltzer. Issues in automatic provenance collection. In Moreau and Foster [36], pages 171–183.
8. U. Braun, A. Shinnar, and M. Seltzer. Securing provenance. In Proc. of the 3rd USENIX Workshop on Hot Topics in Security (HotSec), July 2008.
9. P. Buneman, A. Chapman, and J. Cheney. Provenance management in curated databases. In Proc. of the ACM International Conference on Management of Data (SIGMOD), pages 539–550, New York, NY, USA, 2006. ACM Press.
10. P. Buneman, A. Chapman, J. Cheney, and S. Vansummeren. A provenance model for manually curated data. In Moreau and Foster [36], pages 162–170.
11. P. Buneman, S. Khanna, and W. C. Tan. Data provenance: Some basic issues. In Proc. of the 20th Conference on Foundations of Software Technology and Theoretical Computer Science (FST TCS), pages 87–93, London, UK, 2000. Springer-Verlag.
12. P. Buneman, S. Khanna, and W. C. Tan. Why and where: A characterization of data provenance. Lecture Notes in Computer Science, 1973:316–330, 2001.
13. Centers for Medicare & Medicaid Services. The Health Insurance Portability and Accountability Act of 1996 (HIPAA). Online at http://www.cms.hhs.gov/hipaa/, 1996.
14. A. Chapman, H. Jagadish, and P. Ramanan. Efficient provenance storage. In Proc. of the ACM SIGMOD/PODS Conference, Vancouver, Canada, 2008.
15. B. Collins-Sussman. The subversion project: Buiding a better CVS. Linux J., 2002(94):3, 2002.
16. J. R. Douceur and W. J. Bolosky. A large-scale study of filesystem contents. In Proc. of the ACM International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS), pages 59–70. ACM Press, 1999.
17. D. Ellard, J. Ledlie, P. Malkani, and M. Seltzer. Passive NFS tracing of email and research workloads. In Proc. of the 2nd USENIX Conference on File and Storage Technologies (FAST), pages 203–216, Berkeley, CA, USA, 2003. USENIX Assoc.
18. I. T. Foster, J.-S. Vockler, M. Wilde, and Y. Zhao. Chimera: A virtual data system for representing, querying, and automating data derivation. In Proc. of the 14th International Conference on Scientific and Statistical Database Management (SSDBM), pages 37–46, Washington, DC, USA, 2002. IEEE Computer Society.
19. J. Frew and R. Bose. Earth system science workbench: A data management infrastructure for earth science products. In Proc. of the 13th International Conference on Scientific and Statistical Database Management (SSDBM), page 180, Washington, DC, USA, 2001. IEEE Computer Society.
20. R. Gennaro and P. Rohatgi. How to Sign Digital Streams. Information and Computation, 165(1):100–116, 2001.
21. J. Golbeck. Combining provenance with trust in social networks for semantic web content filtering. In Moreau and Foster [36], pages 101–108.
22. O. Goldreich. Foundations of Cryptography. Cambridge University Press, 2001.
23. P. Golle and N. Modadugu. Authenticating streamed data in the presence of random packet loss. In Proc. of the Symposium on Network and Distributed Systems Security (NDSS), pages 13–22, 2001.
24. D. Halevy and A. Shamir. The LSD broadcast encryption scheme. In Proc. of the 22nd Annual International Cryptology Conference on Advances in Cryptology (CRYPTO), pages 47–60, London, UK, 2002. Springer-Verlag.
25. R. Hasan, R. Sion, and M. Winslett. Introducing secure provenance: problems and challenges. In Proc. of the ACM workshop on Storage security and survivability (StorageSS), pages 13–18, New York, NY, USA, 2007. ACM.
26. J. Katcher. Postmark: a new file system benchmark. Network Appliance Tech Report TR3022, Oct 1997.
27. N. Kogan, Y. Shavitt, and A. Wool. A practical revocation scheme for broadcast encryption using smartcards. ACM Trans. Inf. Syst. Secur., 9(3):325–351, 2006.
28. A. W. Leung, S. Pasupathy, G. Goodson, and E. L. Miller. Measurement and analysis of large-scale network file system workloads. In Proc. of the USENIX Annual Technical Conference, pages 213–226, Berkeley, CA, USA, 2008. USENIX Assoc.
29. J. Li, M. N. Krohn, D. Mazières, and D. Shasha. Secure untrusted data repository (SUNDR). In Proc. of the 6th Symposium on Operating Systems Design and Implementation (OSDI), pages 121–136, 2004.
30. J. Loeliger. Collaborating with Git. Linux Magazine, June 2006.
31. C. A. Lynch. When documents deceive: Trust and provenance as new factors for information retrieval in a tangled web. Journal of the American Society for Information Science and Technology, 52(1):12–17, 2001.
32. P. Maniatis and M. Baker. Secure history preservation through timeline entanglement. In Proc. of the 11th USENIX Security Symposium, pages 297–312, Berkeley, CA, USA, 2002. USENIX Assoc.
33. G. Mella, E. Ferrari, E. Bertino, and Y. Koglin. Controlled and cooperative updates of XML documents in byzantine and failure-prone distributed systems. ACM Trans. Inf. Syst. Secur., 9(4):421–460, 2006.
34. A. J. Menezes, P. C. van Oorschot, and S. A. Vanstone. Handbook of Applied Cryptography. CRC Press, 2001.
35. S. K. Miner and J. Staddon. Graph-based authentication of digital streams. In Proc. of the IEEE Symposium on Security and Privacy, pages 232–246, 2001.
36. L. Moreau and I. T. Foster, editors. Provenance and Annotation of Data, International Provenance and Annotation Workshop (IPAW), volume 4145 of Lecture Notes in Computer Science. Springer, 2006.
37. L. Moreau, P. Groth, S. Miles, J. Vazquez-Salceda, J. Ibbotson, S. Jiang, S. Munroe, O. Rana, A. Schreiber, V. Tan, and L. Varga. The provenance of electronic data. Commun. ACM, 51(4):52–58, 2008.
38. K.-K. Muniswamy-Reddy, D. A. Holland, U. Braun, and M. I. Seltzer. Provenance-aware storage systems. In Proc. of the USENIX Annual Technical Conference, pages 43–56, 2006.
39. J. D. Myers and et al. A collaborative informatics infrastructure for multi-scale science. In Proc. of the 2nd International Workshop on Challenges of Large Applications in Distributed Environments (CLADE), page 24, Washington, DC, USA, 2004. IEEE Computer Society.
40. National Assoc. of Insurance Commissioners. Graham-Leach-Bliley Act, 1999. www.naic.org/GLBA.
41. A. Perrig, R. Canetti, D. Tygar, and D. Song. Efficient authentication and signing of multicast streams over lossy channels. In Proc. of the IEEE Symposium on Security & Privacy, pages 56–73, May 2000.
42. Z. N. J. Peterson, R. Burns, G. Ateniese, and S. Bono. Design and implementation of verifiable audit trails for a versioning file system. In Proc. of the 5th USENIX conference on File and Storage Technologies (FAST’07), pages 93–106, Berkeley, CA, USA, 2007. USENIX Assoc.
43. W. Pugh. Skip lists: a probabilistic alternative to balanced trees. Communications of the ACM, 33(6):668–676, 1990.
44. D. Roselli, J. R. Lorch, and T. E. Anderson. A comparison of file system workloads. In Proc. of the USENIX Annual Technical Conference, Berkeley, CA, USA, 2000. USENIX Assoc.
45. D. Sandler and D. S. Wallach. Casting votes in the auditorium. In Proc. of the USENIX Workshop on Accurate Electronic Voting Technology, Berkeley, CA, USA, 2007. USENIX Assoc.
46. C. Sar and P. Cao. Lineage file system. Online at http://crypto.stanford.edu/ cao/lineage.html, January 2005.
47. B. Schneier and J. Kelsey. Secure audit logs to support computer forensics. ACM Trans. Inf. Syst. Secur., 2(2):159–176, 1999.
48. M. Seltzer, K. Smith, H. Balakrishnan, J. Chang, S. McMains, and V. Padmanabhan. File system logging versus clustering: a performance comparison. In Proc. of the USENIX 1995 Technical Conference, pages 249–264, Berkeley, CA, USA, 1995. USENIX Assoc.
49. A. Shamir. How to share a secret. Commun. ACM, 22(11):612–613, 1979.
50. Y. L. Simmhan, B. Plale, and D. Gannon. A survey of data provenance in e-science. SIGMOD Rec., 34(3):31–36, September 2005.
51. R. Snodgrass, S. Yao, and C. Collberg. Tamper detection in audit logs. In Proc. of the 30th International Conference on Very Large Data Bases (VLDB), pages 504–515. VLDB Endowment, 2004.
52. M. Szomszor and L. Moreau. Recording and reasoning over data provenance in web and grid services. In Proc. of the International Conference on Ontologies, Databases and Applications of SEmantics (ODBASE), volume 2888 of Lecture Notes in Computer Science, pages 603–620, Catania, Sicily, Italy, Nov. 2003.
53. V. Tan, P. Groth, S. Miles, S. Jiang, S. Munroe, S. Tsasakou, and L. Moreau. Security issues in a SOA-based provenance system. In Moreau and Foster [36], pages 203–211.
54. The OpenSSL Project. OpenSSL: The open source toolkit for SSL/TLS. www.openssl.org, April 2003.
55. The U.S. Securities and Exchange Commission. Rule 17a-3&4, 17 CFR Part 240: Electronic Storage of Broker-Dealer Records. Online at http://edocket.access.gpo.gov/cfr_2002/aprqtr/17cfr240.17a-4.htm, 2003.
56. U.S. Public Law No. 107-204, 116 Stat. 745. The Public Company Accounting Reform and Investor Protection Act, 2002.
57. N. N. Vijayakumar and B. Plale. Towards low overhead provenance tracking in near real-time stream filtering. In Moreau and Foster [36], pages 46–54.
58. D. Wichers, D. Cook, R. Olsson, J. Crossley, P. Kerchen, K. Levitt, and R. Lo. PACLs: An access control list approach to anti-viral security. In Proc. of the 13th National Computer Security Conference, pages 340–349, 1990.
59. J. Widom. Trio: A system for integrated management of data, accuracy, and lineage. In Proc. of the 2nd Biennial Conference on Innovative Data Systems Research (CIDR), January 2005.
60. J. Zhao, C. A. Goble, R. Stevens, and S. Bechhofer. Semantically linking and browsing provenance logs for E-science. In Proc. of the 1st International IFIP Conference on Semantics of a Networked World (ICSNW), pages 158–176, 2004.