Practical Attacks on Relational Databases Protected via Searchable Encryption

Funding details: ICT-07-2014; Funding details: 644814; Funding text: Acknowledgments. This work was supported by European Union’s Horizon 2020 research and innovation programme under grant agreement No 644814, the PaaSword project within the ICT Programme ICT-07-2014: Advanced Cloud Infrastructures and Services.
Searchable symmetric encryption (SSE) schemes are commonly proposed to enable search in a protected unstructured documents such as email archives or any set of sensitive text files. However, some SSE schemes have been recently proposed in order to protect relational databases. Most of the previous attacks on SSE schemes have only targeted its common use case, protecting unstructured data. In this work, we propose a new inference attack on relational databases protected via SSE schemes. Our inference attack enables a passive adversary with only basic knowledge about the meta-data information of the target relational database to recover the attribute names of some observed queries. This violates query privacy since the attribute name of a query is secret.

NATURVETENSKAP Data- och informationsvetenskap Systemvetenskap, informationssystem och informatik hsv//swe
NATURAL SCIENCES Computer and Information Sciences Information Systems hsv//eng
Query languages
Query processing
Security of data
E-mail archives
Inference attacks
Passive adversary
Relational Database
Searchable encryptions
Symmetric encryption
Unstructured data
Unstructured documents
Cryptography

Andersson, TobiasRISE,SICS,RISE SICS AB(Swepub:ri)tobias.andersson@ri.se (författare)
Gehrmann, ChristianLund University,Lunds universitet,Nätverk och säkerhet,Forskargrupper vid Lunds universitet,Networks and Security,Lund University Research Groups(Swepub:lu)eit-cgh (författare)
Glackin, CorneliusIntelligent Voice Ltd, UK (författare)
Chen, Liqun (redaktör/utgivare)
Manulis, Mark (redaktör/utgivare)
Schneider, Steve (redaktör/utgivare)
Intelligent Voice Ltd, UKSICS (creator_code:org_t)

Ingår i:Lecture Notes in Computer ScienceCham : Springer International Publishing, s. 171-1911611-33490302-97439783319991351

Av författaren/redakt...: Abdelraheem, Moh ...; Andersson, Tobia ...; Gehrmann, Christ ...; Glackin, Corneli ...; Chen, Liqun; Manulis, Mark; visa fler...; Schneider, Steve; visa färre...

Om ämnet

NATURVETENSKAP: NATURVETENSKAP; och Data och informa ...; och Systemvetenskap ...

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.