CSR: Small: Privacy and Security for MapReduce Clouds with PASMAC

本研究旨在设计和评估在不可信云中安全、保护隐私的数据分析协议。因此，用户可以在云中存储和查询数据，保护外包数据和查询的隐私和完整性。这些api专门针对一个现实世界的云框架：b谷歌突出的MapReduce范式。传统的解决方案为单服务器设置和相关工作，例如：，全同态加密，计算量太大，不经济，抵消了云的优势。pi的基本原理是根据mapreduce计算范式的具体情况设计新的协议。pi的方法是双重的。首先，pisi设计了新的协议，允许云用户为搜索、模式匹配或计数等典型操作指定数据分析查询。为此，pi扩展了隐私保护技术，例如，隐私信息检索或命令保存加密。其次，pi设计协议，保证从云中检索的数据的真实性。使用密码累加器，用户可以验证数据是否未被篡改。除了设计之外，pi还实现了一个原型，可以在现实环境中使用MapReduce。该项目的成果是在广泛使用的云计算框架中实现隐私保护操作和安全数据存储，从而消除了一个主要的采用障碍，并使云计算可用于更大的社区。

This research targets the design and evaluation of protocols forsecure, privacy-preserving data analysis in an untrustedcloud. Therewith, the user can store and query data in the cloud,preserving privacy and integrity of outsourced data and queries. ThePIs specifically address a real-world cloud framework: Google'sprominent MapReduce paradigm.Traditional solutions for single server setups and related work on,e.g., fully homomorphic encryption, are computationally too heavy anduneconomical and offset cloud advantages. The PIs' rationale is todesign new protocols tailored to the specifics of the MapReducecomputing paradigm. The PIs' methodology is twofold. First, the PIsdesign new protocols that allow the cloud user to specify dataanalysis queries for typical operations such as searching, patternmatching or counting. For this, the PIs extend privacy-preservingtechniques, e.g., private information retrieval or order preservingencryption. Second, the PIs design protocols guaranteeing genuinenessof data retrieved from the cloud. Using cryptographic accumulators,users can verify whether data has not been tampered with. Besidesdesign, the PIs also implement a prototype that is usable in arealistic setting with MapReduce.The outcome of this project enables privacy-preserving operations andsecure data storage in a widely-used cloud computing framework, thusremove one major adoption obstacle, and make cloud computing availablefor a larger community.