Abstract:Due to the advantages of pay-on-demand, expand-on-demand and high availability, cloud databases (CloudDB) have been widely used in information systems. However, since a CloudDB is distributed on an untrusted cloud side, it is an important problem how to effectively protect massive private information in the CloudDB. Although traditional security strategies (such as identity authentication and access control) can prevent illegal users from accessing unauthorized data, they cannot prevent internal users at the cloud side from accessing and exposing personal privacy information. In this paper, we propose a client-based approach to protect personal privacy in a CloudDB. In the approach, privacy data before being stored into the cloud side, would be encrypted using a traditional encryption algorithm, so as to ensure the security of privacy data. To execute various kinds of query operations over the encrypted data efficiently, the encrypted data would be also augmented with additional feature index, so that as much of each query operation as possible can be processed on the cloud side without the need to decrypt the data. To this end, we explore how the feature index of privacy data is constructed, and how a query operation over privacy data is transformed into a new query operation over the index data so that it can be executed on the cloud side correctly. The effectiveness of the approach is demonstrated by theoretical analysis and experimental evaluation. The results show that the approach has good performance in terms of security, usability and efficiency, thus effective to protect personal privacy in the CloudDB.

One Method and Implementation of Security-Policy-based Data Protection

A Reference Model And System Architecture For Database Firewall

Research and design of security protection architecture for database application system

Building a Highly Available and Intrusion Tolerant Database Security and Protection System (DSPS)

Automated Enforcement of the Principle of Least Privilege over Data Source Access

Integrating secure database access control and privacy protection

A METHOD OF DATABASE ENCRYPTION AND KEY MANAGEMENT

Integrated Security over Outsourced Database Services Based on Encryption

Threat Analysis And Security Protection For Malicious Dbms

Security Policies for Securing Cloud Databases

Research on Internet data security and privacy protection

Integrated privacy protection and access control over outsourced database services

Data Protect Method Based on User's Authorization

Research on the Application of Computer Big Data Technology in Information Security Management

Progress of Cryptographic Access Control and Encryption Security Database

Database As a Service——Security and Privacy Preserving

Design and Improvement of One Database System Security

A New Policy to Defend against SQL Injection Attacks

An Effective Approach for the Protection of Privacy Text Data in the CloudDB

Research and Application of the Transparent Data Encpryption in Intranet Data Leakage Prevention

Secure Dataspace with Access Policies