A survey on design and implementation of protected searchable data in the cloud

Abstract

While cloud computing has exploded in popularity in recent years thanks to the potential efficiency and cost savings of outsourcing the storage and management of data and applications, a number of vulnerabilities that led to multiple attacks have deterred many potential users.As a result, experts in the field argued that new mechanisms are needed in order to create trusted and secure cloud services. Such mechanisms would eradicate the suspicion of users towards cloud computing by providing the necessary security guarantees. Searchable Encryption is among the most promising solutions -one that has the potential to help offer truly secure and privacypreserving cloud services. We start this paper by surveying the most important searchable encryption schemes and their relevance to cloud computing. In light of this analysis we demonstrate the inefficiencies of the existing schemes and expand our analysis by discussing certain confidentiality and privacy issues. Further, we examine how to integrate such a scheme with a popular cloud platform. Finally, we have chosen -based on the findings of our analysis -an * Corresponding Author. Preprint submitted to Computer Science Review JournalAugust 14, 2017 existing scheme and implemented it to review its practical maturity for deployment in real systems. The survey of the field, together with the analysis and with the extensive experimental results provides a comprehensive review of the theoretical and practical aspects of searchable encryption.

PaaSword: A Holistic Data Privacy and Security by Design Framework for Cloud Services

“…To this end, we describe the need for a context-aware security model which serves as the basis of a fine-grained access control scheme, one which allows the per-user management of access rights. In addition to that, we describe a physical distribution, encryption and query middleware that is based on a searchable encryption (SE) scheme [11] which allows legitimate users to directly search over encrypted data, thus ensuring the confidentiality and integrity of the stored data.…”

LocLess: Do you Really Care Where Your Cloud Files Are?

“…To achieve the first goal, we propose a protocol that is solely based on a Symmetric Searchable Encryption scheme [10] while for the second one we rely on standard techniques for secure upload of data on the cloud.…”

Bootstrapping trust in software defined networks

“…Integrating storage protection mechanisms Related work on cloud storage protection [11,15,25] and secure virtual environment deployment [28] can be integrated with TruSDN in order to provide cloud infrastructure compute, storage and communication resources that are secure in the given adversarial model.…”