Name
Abstract | ||
|---|---|---|
Cloud infrastructures provide database services as cost-efficient and scalable solutions for storing and processing large amounts of data. To maximize performance, these services require users to trust sensitive information to the cloud provider, which raises privacy and legal concerns. This represents a major obstacle to the adoption of the cloud computing paradigm. Recent work addressed this issue by extending databases to compute over encrypted data. However, these approaches usually support a single and strict combination of cryptographic techniques invariably making them application specific. To assess and broaden the applicability of cryptographic techniques in secure cloud storage and processing, these techniques need to be thoroughly evaluated in a modular and configurable database environment. This is even more noticeable for NoSQL data stores where data privacy is still mostly overlooked. In this paper, we present a generic NoSQL framework and a set of libraries supporting data processing cryptographic techniques that can be used with existing NoSQL engines and composed to meet the privacy and performance requirements of different applications. This is achieved through a modular and extensible design that enables data processing over multiple cryptographic techniques applied on the same database. For each technique, we provide an overview of its security model, along with an extensive set of experiments. The framework is evaluated with the YCSB benchmark, where we assess the practicality and performance tradeoffs for different combinations of cryptographic techniques. The results for a set of macro experiments show that the average overhead in NoSQL operations performance is below 15%, when comparing our system with a baseline database without privacy guarantees. |
Year | DOI | Venue |
|---|---|---|
2017 | 10.1109/SRDS.2017.10 | 2017 IEEE 36th Symposium on Reliable Distributed Systems (SRDS) |
Keywords | Field | DocType |
NoSQL databases,Cryptography,Cryptographic Technique,Encrypted Data,Key-Value Store,Cloud Computing,HBase,Secure Database,NoSQL framework | Computer science,Encryption,NoSQL,Information sensitivity,Information privacy,Computer security model,Cloud storage,Database,Scalability,Cloud computing,Distributed computing | Conference |
ISSN | ISBN | Citations |
1060-9857 | 978-1-5386-1680-2 | 1 |
PageRank | References | Authors |
0.41 | 21 | 7 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Ricardo Macedo | 1 | 4 | 2.23 |
| João Paulo | 2 | 10 | 3.73 |
| Rogerio Pontes | 3 | 7 | 2.04 |
| Bernardo Portela | 4 | 38 | 3.90 |
| Tiago R. Oliveira | 5 | 36 | 10.45 |
| Miguel Matos | 6 | 105 | 13.44 |
| Alfrânio Correia Jr. | 7 | 98 | 9.20 |