Abstract:Security has become a significant concern with the increased popularity of cloud storage services. It comes with the vulnerability of being accessed by third parties. Security is one of the major hurdles in the cloud server for the user when the user data that reside in local storage is outsourced to the cloud. It has given rise to security concerns involved in data confidentiality even after the deletion of data from cloud storage. Though, it raises a serious problem when the encrypted data needs to be shared with more people than the data owner initially designated. However, searching on encrypted data is a fundamental issue in cloud storage. The method of searching over encrypted data represents a significant challenge in the cloud. Searchable encryption allows a cloud server to conduct a search over encrypted data on behalf of the data users without learning the underlying plaintexts. While many academic SE schemes show provable security, they usually expose some query information, making them less practical, weak in usability, and challenging to deploy. Also, sharing encrypted data with other authorized users must provide each document's secret key. However, this way has many limitations due to the difficulty of key management and distribution. We have designed the system using the existing cryptographic approaches, ensuring the search on encrypted data over the cloud. The primary focus of our proposed model is to ensure user privacy and security through a less computationally intensive, user-friendly system with a trusted third party entity. To demonstrate our proposed model, we have implemented a web application called CryptoSearch as an overlay system on top of a well-known cloud storage domain. It exhibits secure search on encrypted data with no compromise to the user-friendliness and the scheme's functional performance in real-world applications.

From Struggle to Simplicity with a Usable and Secure API for Encryption in Java

Java Cryptography API Security Enhancement Based on Annotations

CryptoExplorer: An Interactive Web Platform Supporting Secure Use of Cryptography APIs

FluentCrypto: Cryptography in Easy Mode

Time to Separate from StackOverflow and Match with ChatGPT for Encryption

Evaluation of Static Vulnerability Detection Tools with Java Cryptographic API Benchmarks

Secure Coding Practices in Java: Challenges and Vulnerabilities

Leveraging Intel SGX to Create a Nondisclosure Cryptographic library

iCryptoTracer: Dynamic Analysis on Misuse of Cryptography Functions in iOS Applications.

When Contracts Meets Crypto: Exploring Developers' Struggles with Ethereum Cryptographic APIs

CRYLOGGER: Detecting Crypto Misuses Dynamically

Hybrid Encrypted Website based on Springboot

Encryption and decryption implementation in Java based on Poco libraries

Finding Security Vulnerabilities in IoT Cryptographic Protocol and Concurrent Implementations

Control Flow Integrity Based on Lightweight Encryption Architecture.

Harnessing Lightweight Ciphers for PDF Encryption

To Fix or Not to Fix: A Critical Study of Crypto-misuses in the Wild

API Misuse Detection in C Programs: Practice on SSL APIs.

A Complex Encryption System Design Implemented by AES

A Practical Framework for Storing and Searching Encrypted Data on Cloud Storage

Detecting Proper SSL/TLS Implementation with Usage Patterns