Quantifying Information Leakage of Deterministic Encryption

Quantifying Information Leakage of Deterministic Encryption
复制标题

量化确定性加密的信息泄漏

DOI:
10.1145/3338466.3358915
复制
发表时间:
2019
期刊:
2019 Cloud Computing Security Workshop
影响因子:
--
通讯作者:
Smith, Geoffrey
Smith, Geoffrey
中科院分区:
--
文献类型:
--
作者:
Jurado, Mireya;Smith, Geoffrey

文献摘要

参考文献

被引文献

相似文献

为了在维护应用程序功能的同时保护用户数据,加密的数据库可以使用专门的加密技术,例如属性揭示加密,它允许从密文计算底层明文值的属性。一个例子是确定性加密,它确保在相同密钥下加密的相同明文将产生相同的密文。该技术使客户能够对托管在云服务器上的敏感数据进行查询,并具有相当大的保护数据的潜力。然而,确定性加密的安全含义还没有得到很好的理解,我们提供了一个确定性加密的泄漏分析,通过应用定量信息流的框架。这一框架的一个重要启示是,没有一个单一的“正确”的衡量标准可以用来量化渗漏:信息流取决于操作情景,不同的操作情景需要不同的渗漏衡量标准。我们评估泄漏下三个操作的情况下,使用三种不同的增益函数建模,根据各种先验分布,以使这个问题清晰。
In order to protect user data while maintaining application functionality, encrypted databases can use specialized cryptography such as property-revealing encryption, which allows a property of the underlying plaintext values to be computed from the ciphertext. One example is deterministic encryption which ensures that the same plaintext encrypted under the same key will produce the same ciphertext. This technology enables clients to make queries on sensitive data hosted in a cloud server and has considerable potential to protect data. However, the security implications of deterministic encryption are not well understood.We provide a leakage analysis of deterministic encryption through the application of the framework of quantitative information flow. A key insight from this framework is that there is no single "right'' measure by which leakage can be quantified: information flow depends on the operational scenario and different operational scenarios require different leakage measures. We evaluate leakage under three operational scenarios, modeled using three different gain functions, under a variety of prior distributions in order to bring clarity to this problem.
DOI: --
发表时间: --
影响因子: 3.6
作者:
S. Kamara
通讯作者: S. Kamara
DOI: --
发表时间: 2014
期刊: The post
影响因子: --
作者:
Annabelle McIver;Carroll Morgan;Geoffrey Smith;Barbara Espinoza;L. Meinicke
通讯作者: L. Meinicke
论数据碎片索引的信息泄露
DOI: --
发表时间: 2013
期刊: 2013 IEEE 29th International Conference on Data Engineering Workshops (ICDEW)
影响因子: --
作者:
S. Vimercati;S. Foresti;S. Jajodia;S. Paraboschi;P. Samarati
通讯作者: P. Samarati
DOI: --
发表时间: 2019
期刊: International Conference on Mathematics of Program Construction
影响因子: --
作者:
Annabelle McIver
通讯作者: Annabelle McIver
DOI: 10.1007/978-3-319-96131-6
发表时间: 2020
期刊: The Science of Quantitative Information Flow
影响因子: --
作者:
M. Alvim;K. Chatzikokolakis;Annabelle McIver;Carroll Morgan;C. Palamidessi;Geoffrey Smith
通讯作者: Geoffrey Smith