Preventing Information Leakage from Indexing in the Cloud
Published 1 July 2010
Anna Squicciarini, Smitha Sundareswaran, Dan Lin
Citations71
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
A three-tier data protection architecture is designed to accommodate various levels of privacy concerns by users and a novel portable data binding technique is developed to ensure strong enforcement of users' privacy requirements at server side.
Abstract
Cloud computing enables highly scalable services to be easily consumed over the Internet on an as-needed basis. While cloud computing is expanding rapidly and used by many individuals and organizations internationally, data protection issues in the cloud have not been carefully addressed at current stage. Users' fear of confidential data (particularly financial and health data) leakage and loss of privacy in the cloud may become a significant barrier to the wide adoption of cloud services. In this paper, we explore a newly emerging problem of information leakage caused by indexing in the cloud. We design a three-tier data protection architecture to accommodate various levels of privacy concerns by users. According to the architecture, we develop a novel portable data binding technique to ensure strong enforcement of users' privacy requirements at server side.
Keywords
Computer Science
Computer Networks and ISDN SystemsThe anatomy of a large-scale hypertextual Web search engine
15,828 Citations1998Sergey Brin, Lawrence M. Page
This paper provides an in-depth description of Google, a prototype of a large-scale search engine which makes heavy use of the structure present in hypertext and looks at the problem of how to effectively deal with uncontrolled hypertext collections where anyone can publish anything they want.
ComputerRole-based access control models
5,757 Citations1996Ravi Sandhu, Edward J. Coyne +2 more
Why RBAC is receiving renewed attention as a method of security administration and review is explained, a framework of four reference models developed to better understandRBAC is described, and the use of RBAC to manage itself is discussed.
Provable data possession at untrusted stores
2,641 Citations2007Giuseppe Ateniese, Randal Burns +5 more
The model generates probabilistic proofs of possession by sampling random sets of blocks from the server, which drastically reduces I/O costs and the overhead at the server is low (or even constant), as opposed to linear in the size of the data.
IEEE Transactions on Parallel and Distributed SystemsEnabling Public Auditability and Data Dynamics for Storage Security in Cloud Computing
1,484 Citations2010Qian Wang, Cong Wang +3 more
A Taxonomy and Survey of Cloud Computing Systems
1,304 Citations2009Bhaskar Prasad Rimal, Eunmi Choi +1 more
This paper develops a comprehensive taxonomy for describing cloud computing architecture and uses this taxonomy to survey several existing cloud computing services developed by various projects world-wide, to identify similarities and differences of the architectural approaches of cloud computing.
Data Privacy through Optimal k-Anonymization
1,130 Citations2005Roberto J. Bayardo, R. Agrawal
This paper proposes and evaluates an optimization algorithm for the powerful de-identification procedure known as k-anonymization, and presents a new approach to exploring the space of possible anonymizations that tames the combinatorics of the problem, and develops data-management strategies to reduce reliance on expensive operations such as sorting.
Lecture notes in computer sciencePrivacy Preserving Keyword Searches on Remote Encrypted Data
1,041 Citations2005Yan-Cheng Chang, Michael Mitzenmacher
This paper offers solutions for the problem of efficiently retrieving some of the encrypted files containing (or indexed by) specific keywords, keeping the keywords themselves secret and not jeopardizing the security of the remotely stored files.
Lecture notes in computer scienceEnabling Public Verifiability and Data Dynamics for Storage Security in Cloud Computing
892 Citations2009Qian Wang, Cong Wang +3 more
The task of allowing a third party auditor (TPA), on behalf of the cloud client, to verify the integrity of the dynamic data stored in the cloud is considered, and an elegant verification scheme is constructed for seamless integration of these two salient features in the protocol design.
IEEE Security & PrivacyData Security in the World of Cloud Computing
773 Citations2009Lori M. Kaufman
To ensure that decisions are informed and appropriate for the cloud computing environment, the industry itself should establish coherent and effective policy and governance to identify and implement proper security methods.
Cloud Security Issues
603 Citations2009Balachandra Reddy Kandukuri, Ramakrishna Paturi V. +1 more
Some security issues that have to be included in service level agreements (SLA) are put forward to help some of the enterprises to look forward in using the cloud services.
Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance
550 Citations2009Tim Mather, S Kumaraswamy +1 more
Store, Forget, and Check: Using Algebraic Signatures to Check Remotely Administered Storage
297 Citations2006Thomas S. J. Schwarz, Ethan L. Miller
Journal of Information Technology & PoliticsCloud Computing and Information Policy: Computing in a Policy Cloud?
293 Citations2008Paul T. Jaeger, Jimmy Lin +1 more
The nature and potential of cloud computing, the policy issues raised, and research questions related to cloud computing and policy are examined as a part of larger issues of public policy attempting to respond to rapid technological evolution.
Lecture notes in computer scienceA Privacy Manager for Cloud Computing
229 Citations2009Siani Pearson, Yun Shen +1 more
A privacy manager for cloud computing is described, which reduces the risk to the cloud computing user of their private data being stolen or misused, and also assists the cloud Computing provider to conform to privacy law.
A cooperative internet backup scheme
195 Citations2003Mark Lillibridge, Sameh Elnikety +3 more
Lecture notes in computer scienceAccountability as a Way Forward for Privacy Protection in the Cloud
189 Citations2009Siani Pearson, Andrew Charlesworth
This paper proposes an approach in which procedural and technical solutions are co-designed to demonstrate accountability as a path forward to resolving jurisdictional privacy and security risks within the cloud.
Identity in the Information SocietyPrivacy in the clouds
114 Citations2008Ann Cavoukian
Four fundamental technological approaches to help assure widespread and enduring online participation, confidence and trust in the information society are outlined.
The VLDB JournalPrivacy-preserving indexing of documents on the network
79 Citations2009Mayank Bawa, Roberto J. Bayardo +2 more
The appeal of the solution is twofold: content providers maintain complete control in defining access groups and ensuring its compliance, and system implementors retain tunable knobs to balance privacy and efficiency concerns for their particular domains.
Lecture notes in computer scienceWatermarking Security: A Survey
77 Citations2006Luis Pérez-Freire, Pedro Comesaña +2 more
This paper is intended to clarify the concepts related to watermarking security, provide an exhaustive literature overview, and serve as a starting point for newcomers interested in carrying out research on this topic.
A simple and expressive semantic framework for policy composition in access control
55 Citations2007Glenn Bruns, Daniel S. Dantas +1 more
This work defines an access controlpolicy as a four-valued predicate that maps accesses to either grant, deny, conflict, or unspecified, and proposes a basic query language that can reduce important analyses to checks of policy refinement.
Lecture notes in computer scienceTowards Accountable Management of Privacy and Identity Information
33 Citations2003Marco Casassa Mont, Siani Pearson +1 more
A technical solution based on ”sticky” privacy policies and tracing services that leverages Identifier-based Encryption (IBE) along with trusted platform technologies such as TCPA (TCG) and Tagged Operating Systems is introduced.
On Using Encryption Techniques to Enhance Sticky Policies Enforcement
20 Citations2008Qiang Tang
An overview of the state of the art in enforcing sticky policies, especially the concept of sticky policy enforcement using encryption techniques including Public-Key Encryption (PKE), Identity-Based Enc encryption (IBE), Attribute-Based encryption (ABE), and Proxy Re-Encryption (PRE).
Lecture notes in computer scienceVerifiable and Revocable Expression of Consent to Processing of Aggregated Personal Data
18 Citations2008Henrich C. Pöhls
A solution based on a hash tree structure and digitally signed only the hash tree's root value so that a verifiable signature can be retained even if data items are omitted and a valid signature serves as signal of consent.
Lecture notes in computer scienceSimplified Privacy Controls for Aggregated Services — Suspend and Resume of Personal Data
12 Citations2007Matthias Schunter, Michael Waidner
A new lightweight approach towards privacy management to provide a "privacy panel" - a unified and simple entry point at each site that enables consumers to review stored data and manage their privacy.
Privacy Preserving Keyword Searches on Remote Encrypted Data.
8 Citations2004Yan-Cheng Chang, Michael Mitzenmacher
Lecture notes in computer scienceTowards Privacy-Preserving Model Selection
7 Citations2008Zhiqiang Yang, Sheng Zhong +1 more
This paper studies cross validation, a standard method of model selection, in the setting in which two parties hold a vertically partitioned database, and shows how the participants can carry out privacy-preserving cross validation in order to select among a number of candidate models without revealing their data to each other.