Collaborative Research: SaTC: CORE: Medium: The Next Generation of Leakage Attacks and Defenses for Encrypted Databases

协作研究：SaTC：核心：中：加密数据库的下一代泄漏攻击和防御

• 批准号: 2154490
• 负责人: Roberto Tamassia
• 金额: $ 40万
• 依托单位: Brown University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-07-15 至 2025-06-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2154490&HistoricalAwards=false
• 关键词: Collaborative; Research; SaTC; CORE; Medium

growing number of works explore the area of encrypted databases as a practical approach to searching on encrypted data stored at a server. The client encrypts the data before uploading it to the server. The server is not given the decryption key, yet the server can execute searches on the encrypted data requested by the client and return the corresponding encrypted answers. An encrypted database efficiently achieves the above functionality by allowing some leakage about the original (plaintext) data that appears harmless but could be exploited by an attacker who attempts to reconstruct the original data by synthesizing leakage from the encrypted answers and encrypted queries over time. This project aims to develop the next generation of methods for building efficient encrypted databases and for analyzing their resilience to reconstruction attacks. To achieve this goal, it uses methods from algorithms, statistics, geometry, databases, and computer systems. Specific research activities include cryptanalysis of the leakage from encrypted databases with suppressed leakage as well as cryptanalysis and schemes for high-dimensional encrypted queries. Informed by the above research thrusts, this project will develop a principled analysis of defenses as well as a framework for quantifying the impact of leakage in the context of encrypted databases. Toward achieving broader impacts, this project includes curriculum development for computer security courses, efforts to include members of underrepresented groups in research activities, and outreach to industry and government audiences.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

越来越多的作品探索加密数据库领域，将其作为搜索存储在服务器上的加密数据的实用方法。客户端在将数据上传到服务器之前对数据进行加密。服务器不会被给予解密密钥，但服务器可以对客户端请求的加密数据执行搜索，并返回相应的加密答案。加密数据库通过允许关于原始(明文)数据的一些泄漏来有效地实现上述功能，该原始(明文)数据看似无害，但可能被攻击者利用，该攻击者试图通过合成来自加密答案和加密查询的泄漏来随时间推移来重建原始数据。该项目旨在开发下一代方法，用于建立高效的加密数据库并分析其对重建攻击的恢复能力。为了实现这一目标，它使用了来自算法、统计学、几何学、数据库和计算机系统的方法。具体的研究活动包括加密数据库泄漏的密码分析和高维加密查询的密码分析和方案。在上述研究工作的推动下，该项目将对防御措施进行原则性分析，并制定一个框架，以便在加密数据库的背景下量化泄漏的影响。为了实现更广泛的影响，该项目包括计算机安全课程的课程开发，努力将代表性不足的群体的成员纳入研究活动，以及向行业和政府受众推广。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Time- and Space-Efficient Aggregate Range Queries over Encrypted Databases

• DOI: 10.56553/popets-2022-0128
• 发表时间: 2022-10
• 期刊: Proc. Priv. Enhancing Technol.
• 作者: Zachary Espiritu;Evangelia Anna Markatou;R. Tamassia

Range Search over Encrypted Multi-Attribute Data

• DOI: 10.14778/3574245.3574247
• 发表时间: 2022-12
• 期刊: Proc. VLDB Endow.
• 作者: Francesca Falzon;Evangelia Anna Markatou;Zachary Espiritu;R. Tamassia