Long White Cloud (LWC): A Practical and Privacy-Preserving Outsourced Database - Information Security Theory and Practice
Conference Papers Year : 2018

Long White Cloud (LWC): A Practical and Privacy-Preserving Outsourced Database

Shujie Cui
  • Function : Author
  • PersonId : 1036532
Ming Zhang
  • Function : Author
  • PersonId : 1036533
Muhammad Rizwan Asghar
  • Function : Author
  • PersonId : 1036534
Giovanni Russello
  • Function : Author
  • PersonId : 1007406

Abstract

To fully benefit from a cloud storage approach, privacy in outsourced databases needs to be preserved in order to protect information about individuals and organisations from malicious cloud providers. As shown in recent studies [1, 2], encryption alone is insufficient to prevent a malicious cloud provider from analysing data access patterns and mounting statistical inference attacks on encrypted databases. In order to thwart such attacks, actions performed on outsourced databases need to be oblivious to cloud service providers. Approaches, such as Fully Homomorphic Encryption (FHE), Oblivious RAM (ORAM), or Secure Multi-Party Computation (SMC) have been proposed but they are still not practical. This paper investigates and proposes a practical privacy-preserving scheme, named Long White Cloud (LWC), for outsourced databases with a focus on providing security against statistical inferences. Performance is a key issue in the search and retrieval of encrypted databases. LWC supports logarithmic-time insert, search and delete queries executed by outsourced databases with minimised information leakage to curious cloud service providers. As a proof-of-concept, we have implemented LWC and compared it with a plaintext MySQL database: even with a database size of 10M records, our approach shows only a 10-time slowdown factor.
Fichier principal
Vignette du fichier
469589_1_En_3_Chapter.pdf (557 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01875518 , version 1 (17-09-2018)

Licence

Identifiers

Cite

Shujie Cui, Ming Zhang, Muhammad Rizwan Asghar, Giovanni Russello. Long White Cloud (LWC): A Practical and Privacy-Preserving Outsourced Database. 11th IFIP International Conference on Information Security Theory and Practice (WISTP), Sep 2017, Heraklion, Greece. pp.41-55, ⟨10.1007/978-3-319-93524-9_3⟩. ⟨hal-01875518⟩
59 View
63 Download

Altmetric

Share

More