Combining fragmentation and encryption to protect privacy in data storage

Abstract

The impact of privacy requirements in the development of modern applications is increasing very quickly. Many commercial and legal regulations are driving the need to develop reliable solutions for protecting sensitive information whenever it is stored, processed, or communicated to external parties. To this purpose, encryption techniques are currently used in many scenarios where data protection is required since they provide a layer of protection against the disclosure of personal information, which safeguards companies from the costs that may arise from exposing their data to privacy breaches. However, dealing with encrypted data may make query processing more expensive.In this article, we address these issues by proposing a solution to enforce the privacy of data collections that combines data fragmentation with encryption. We model privacy requirements as confidentiality constraints expressing the sensitivity of attributes and their associations. We then This article extends the previous work by the authors appeared under the title Fragmentation and Encryption to Enforce Privacy in Data Storage in 22:2 • V. Ciriani et al.use encryption as an underlying (conveniently available) measure for making data unintelligible while exploiting fragmentation as a way to break sensitive associations among attributes. We formalize the problem of minimizing the impact of fragmentation in terms of number of fragments and their affinity and present two heuristic algorithms for solving such problems. We also discuss experimental results, comparing the solutions returned by our heuristics with respect to optimal solutions, which show that the heuristics, while guaranteeing a polynomial-time computation cost are able to retrieve solutions close to optimum.

Database Fragmentation with Encryption: Under Which Semantic Constraints and A Priori Knowledge Can Two Keep a Secret?

“…As a third approach -using an arbitrary number of fragments which are all supposed to be known to an attacker -is presented in [8], a formal analysis of this approach in the spirit of Theorem 1 might be another challenging task for future work.…”

“…This view on r and f 2 is referred to as the set of sentences db R containing the sentences (4), (5), (6), (7) and (8).…”

Preserving Privacy in Outsourced Database

“…Therefore, in order to strike a balance between the two. Some of the approach will combine both of two [16], [17]. We briefly describe the approach for hybrid encryption and data fragmentation.…”

Data Security Issues in Cloud Scenarios

“…In this case, encrypting both names and illnesses may not be necessary. Data fragmentation comes at this point: the use of encryption is limited or avoided by splitting data in di↵erent fragments (e.g., [1,10,11,12,15]). Fragments are computed in such a way that sensitive associations, called confidentiality constraints, are broken.…”