Designing secure indexes for encrypted databases

Authors:
Erez Shmueli;Ronen Waisenberg;Yuval Elovici;Ehud Gudes
Affiliations:
Department of Information Systems Engineering, Ben-Gurion University of the Negev, Faculty of Engineering, Beer-Sheva, Israel;Department of Information Systems Engineering, Ben-Gurion University of the Negev, Faculty of Engineering, Beer-Sheva, Israel;Department of Information Systems Engineering, Ben-Gurion University of the Negev, Faculty of Engineering, Beer-Sheva, Israel;Department of Computer Science, Ben-Gurion University of the Negev, Beer-Sheva, Israel
Venue:
DBSec'05 Proceedings of the 19th annual IFIP WG 11.3 working conference on Data and Applications Security
Year:
2005

Citing 13
Cited 9

A database encryption system with subkeys

ACM Transactions on Database Systems (TODS)
On the encipherment of search trees and random access files

ACM Transactions on Database Systems (TODS) - Special issue: papers from the international conference on very large data bases: September 22–24, 1975, Framingham, MA
Secure and selective dissemination of XML documents

ACM Transactions on Information and System Security (TISSEC)
Handbook of Applied Cryptography

Handbook of Applied Cryptography
Database Management Systems

Database Management Systems
Executing SQL over encrypted data in the database-service-provider model

Proceedings of the 2002 ACM SIGMOD international conference on Management of data
A Novel Index Supporting High Volume Data Warehouse Insertion

VLDB '99 Proceedings of the 25th International Conference on Very Large Data Bases
Practical Techniques for Searches on Encrypted Data

SP '00 Proceedings of the 2000 IEEE Symposium on Security and Privacy
Balancing confidentiality and efficiency in untrusted relational DBMSs

Proceedings of the 10th ACM conference on Computer and communications security
Order preserving encryption for numeric data

SIGMOD '04 Proceedings of the 2004 ACM SIGMOD international conference on Management of data
Chip-secured data access: confidential data on untrusted servers

VLDB '02 Proceedings of the 28th international conference on Very Large Data Bases
GnatDb: a small-footprint, secure database system

VLDB '02 Proceedings of the 28th international conference on Very Large Data Bases
A privacy-preserving index for range queries

VLDB '04 Proceedings of the Thirtieth international conference on Very large data bases - Volume 30

Encryption policies for regulating access to outsourced data

ACM Transactions on Database Systems (TODS)
Database encryption: an overview of contemporary challenges and design considerations

ACM SIGMOD Record
Privacy preserving query processing on secret share based data storage

DASFAA'11 Proceedings of the 16th international conference on Database systems for advanced applications - Volume Part I
A comprehensive framework for secure query processing on relational data in the cloud

SDM'11 Proceedings of the 8th VLDB international conference on Secure data management
Supporting concurrency in private data outsourcing

ESORICS'11 Proceedings of the 16th European conference on Research in computer security
Private data indexes for selective access to outsourced data

Proceedings of the 10th annual ACM workshop on Privacy in the electronic society
Analysis of a database and index encryption scheme – problems and fixes

SDM'06 Proceedings of the Third VLDB international conference on Secure Data Management
Secure data management in the cloud

DNIS'11 Proceedings of the 7th international conference on Databases in Networked Information Systems
Supporting concurrency and multiple indexes in private access to outsourced data

Journal of Computer Security - Research in Computer Security and Privacy: Emerging Trends

Quantified Score

Hi-index	0.00

Visualization

Abstract

The conventional way to speedup queries execution is by using indexes. Designing secure indexes for an encrypted database environment raises the question of how to construct the index so that no information about the database content is exposed. In this paper, the challenges raised when designing a secure index for an encrypted database are outlined; the attacker model is described; possible attacks against secure indexes are discussed; the difficulty posed by multiple users sharing the same index are presented; and the design considerations regarding keys storage and encryption granularity are illustrated. Finally, a secure database-indexing scheme is suggested. In this scheme, protection against information leakage and unauthorized modifications is provided by using encryption, dummy values and pooling. Furthermore, the new scheme supports discretionary access control in a multi-user environment.