Information Leakage in Encrypted Deduplication via Frequency Analysis

Li, Jingwei; Qin, Chuan; Lee, Patrick P. C.; Zhang, Xiaosong

doi:10.1109/dsn.2017.28

Cited by 24 publications

(2 citation statements)

References 38 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The previous schemes enable attackers at the untrusted server to identify if a given block is a duplicate or not, thus being susceptible to information leakage (e.g., revealing potential associations between users and the data these share) [31].…”

Section: Secure Deduplicationmentioning

confidence: 99%

S2Dedup

Miranda

Esteves

Portela

et al. 2021

Proceedings of the 14th ACM International Conference on Systems and Storage

View full text Add to dashboard Cite

Secure deduplication allows removing duplicate content at third-party storage services while preserving the privacy of users' data. However, current solutions are built with strict designs that cannot be adapted to storage service and applications with different security and performance requirements.We present S2Dedup, a trusted hardware-based privacypreserving deduplication system designed to support multiple security schemes that enable different levels of performance, security guarantees and space savings. An in-depth evaluation shows these trade-offs for the distinct Intel SGXbased secure schemes supported by our prototype.Moreover, we propose a novel Epoch and Exact Frequency scheme that prevents frequency analysis leakage attacks present in current deterministic approaches for secure deduplication while maintaining similar performance and space savings to state-of-the-art approaches.

show abstract

Section: Secure Deduplicationmentioning

confidence: 99%

S2Dedup

Miranda

Esteves

Portela

et al. 2021

Proceedings of the 14th ACM International Conference on Systems and Storage

View full text Add to dashboard Cite

show abstract

“…IDC (International Data Corporation) statistic shows that the global data volume reached 4.4 ZB in 2013, reached 8.61 ZB by the end of 2015, the growth rate of data volume is more than 50%, and expected to 2020, it will unexpectedly reach 44 ZB [5]. More than half of the cloud storage space is occupied by the duplicate data, and the expenditure for managing the duplicate data is 8 times that of the original data [6]. Along with the explosive growth of cloud data, massive duplicate data occupied the storage space and the huge expenditure bring a severe challenge to the limited cloud storage space.…”

Section: Introductionmentioning

confidence: 99%

Secure Encrypted Data With Authorized Deduplication in Cloud

et al. 2019

View full text Add to dashboard Cite

In this paper, we propose a novel secure role re-encryption system (SRRS), which is based on convergent encryption and the role re-encryption algorithm to prevent the privacy data leakage in cloud and it also achieves the authorized deduplication and satisfies the dynamic privilege updating and revoking. Meanwhile, our system supports ownership checking and achieves the proof of ownership for the authorized users efficiently. Specifically, we introduce a management center to handle with the authorized request and establish a role authorized tree (RAT) mapping the relationship of the roles and keys. With the convergent encryption algorithm and the role re-encryption technique, it can be guaranteed that only the authorized user who has the corresponding role re-encryption key can access the specific file without any data leakage. Through role re-encryption key updating and revoking, our system achieves the dynamic updating of the authorized user's privilege. Furthermore, we exploit the dynamic count filters (DCF) to implement the data updating and improve the retrieval of ownership verifying effectively. We conduct the security analysis and the simulation experiment to demonstrate the security and efficiency of our proposed system. INDEX TERMS Role re-encryption, role authorized tree, privacy leakage, authorized deduplication, proof of ownership.

show abstract

ms‐PoSW: A multi‐server aided proof of shared ownership scheme for secure deduplication in cloud

Xiong

Zhang

et al. 2017

Concurrency and Computation

View full text Add to dashboard Cite

SummaryCollaborative cloud applications have become the dominant application mode in the big data era. These applications usually generate plenty of cooperative files, which share their ownerships with all collaborative participants. Data deduplication is a promising solution to improve the storage efficiency and save the user expenditure. However, it remains an open issue on how to securely prove the shared ownerships for the shared files and address the attacks on account of using data deduplication. To tackle the above issue, in this paper, we introduce a novel concept of the Proof of Shared oWnership (PoSW) and construct a secure multi‐server‐aided PoSW (ms‐PoSW) scheme for securing client‐side deduplication for the shared files, which is based on the convergent encryption, secret sharing, and bloom filter. In the ms‐PoSW scheme, we employ a sharing convergent key to avoid the single point of failure, introduce the secret sharing algorithm to implement the shared ownership, and construct a novel interaction protocol between the shared owners and the cloud server to prove the shared ownership. Furthermore, a hybrid PoSW scheme is constructed to address the secure proof of hybrid cloud architectures. Finally, security analysis and performance evaluation show the security and efficiency of the proposed schemes.

show abstract

Information Leakage in Encrypted Deduplication via Frequency Analysis

Cited by 24 publications

References 38 publications

S2Dedup

S2Dedup

Secure Encrypted Data With Authorized Deduplication in Cloud

ms‐PoSW: A multi‐server aided proof of shared ownership scheme for secure deduplication in cloud

Contact Info

Product

Resources

About