Balancing confidentiality and efficiency in untrusted relational DBMSs Export

@inproceedings{Damiani:CCS03, abstract = {The scope and character of today's computing environments are progressively shifting from traditional, one-on-one client-server interaction to the new cooperative paradigm. It then becomes of primary importance to provide means of protecting the secrecy of the information, while guaranteeing its availability to legitimate clients. Operating on-line querying services securely on open networks is very difficult; therefore many enterprises outsource their data center operations to external application service providers. A promising direction towards prevention of unauthorized access to outsourced data is represented by encryption. However, data encryption is often supported for the sole purpose of protecting the data in storage and assumes trust in the server, that decrypts data for query execution.In this paper, we present a simple yet robust single-server solution for remote querying of encrypted databases on untrusted servers. Our approach is based on the use of indexing information attached to the encrypted database which can be used by the server to select the data to be returned in response to a query without the need of disclosing the database content. Our indexes balance the trade off between efficiency requirements in query execution and protection requirements due to possible inference attacks exploiting indexing information. We also investigate quantitative measures to model inference exposure and provide some related experimental results.}, address = {New York, NY, USA}, author = {Damiani, Ernesto and De Capitani Vimercati and Jajodia, Sushil and Paraboschi, Stefano and Samarati, Pierangela}, booktitle = {CCS '03: Proceedings of the 10th ACM conference on Computer and communications security}, citeulike-article-id = {4072397}, citeulike-linkout-0 = {http://portal.acm.org/citation.cfm?id=948109.948124}, citeulike-linkout-1 = {http://dx.doi.org/10.1145/948109.948124}, doi = {10.1145/948109.948124}, isbn = {1-58113-738-9}, keywords = {2003, b, ccs, daas, database, encrypted, hash, index, tree}, location = {Washington D.C., USA}, pages = {93--102}, posted-at = {2009-11-03 14:21:41}, priority = {2}, publisher = {ACM}, title = {Balancing confidentiality and efficiency in untrusted relational DBMSs}, url = {http://dx.doi.org/10.1145/948109.948124}, year = {2003} }

TY - CONF ID - Damiani:CCS03 L3 - citeulike-article-id:4072397 N2 - The scope and character of today's computing environments are progressively shifting from traditional, one-on-one client-server interaction to the new cooperative paradigm. It then becomes of primary importance to provide means of protecting the secrecy of the information, while guaranteeing its availability to legitimate clients. Operating on-line querying services securely on open networks is very difficult; therefore many enterprises outsource their data center operations to external application service providers. A promising direction towards prevention of unauthorized access to outsourced data is represented by encryption. However, data encryption is often supported for the sole purpose of protecting the data in storage and assumes trust in the server, that decrypts data for query execution.In this paper, we present a simple yet robust single-server solution for remote querying of encrypted databases on untrusted servers. Our approach is based on the use of indexing information attached to the encrypted database which can be used by the server to select the data to be returned in response to a query without the need of disclosing the database content. Our indexes balance the trade off between efficiency requirements in query execution and protection requirements due to possible inference attacks exploiting indexing information. We also investigate quantitative measures to model inference exposure and provide some related experimental results. CY - Washington D.C., USA SN - 1-58113-738-9 AD - New York, NY, USA EP - 102 TI - Balancing confidentiality and efficiency in untrusted relational DBMSs PB - ACM T2 - CCS '03: Proceedings of the 10th ACM conference on Computer and communications security SP - 93 KW - 2003 KW - b KW - ccs KW - daas KW - database KW - encrypted KW - hash KW - index KW - tree AU - Damiani, Ernesto AU - De Capitani Vimercati AU - Jajodia, Sushil AU - Paraboschi, Stefano AU - Samarati, Pierangela PY - 2003/// UR - http://dx.doi.org/10.1145/948109.948124 ER -