Abstract:Due to the advantages of pay-on-demand, expand-on-demand and high availability, cloud databases (CloudDB) have been widely used in information systems. However, since a CloudDB is distributed on an untrusted cloud side, it is an important problem how to effectively protect massive private information in the CloudDB. Although traditional security strategies (such as identity authentication and access control) can prevent illegal users from accessing unauthorized data, they cannot prevent internal users at the cloud side from accessing and exposing personal privacy information. In this paper, we propose a client-based approach to protect personal privacy in a CloudDB. In the approach, privacy data before being stored into the cloud side, would be encrypted using a traditional encryption algorithm, so as to ensure the security of privacy data. To execute various kinds of query operations over the encrypted data efficiently, the encrypted data would be also augmented with additional feature index, so that as much of each query operation as possible can be processed on the cloud side without the need to decrypt the data. To this end, we explore how the feature index of privacy data is constructed, and how a query operation over privacy data is transformed into a new query operation over the index data so that it can be executed on the cloud side correctly. The effectiveness of the approach is demonstrated by theoretical analysis and experimental evaluation. The results show that the approach has good performance in terms of security, usability and efficiency, thus effective to protect personal privacy in the CloudDB.

C-Wall: Conflict-Resistance in Privacy-Preserving Cloud Storage

Privacy-Preserving Protocol for Data Stored in the Cloud

A Security-Awareness Virtual Machine Management Scheme Based on Chinese Wall Policy in Cloud Computing.

Towards Data Isolation & Collaboration in Storage Cloud.

Design of Privacy-Preserving Cloud Storage Framework

Cryptanalysis of an Integrity Checking Scheme for Cloud Data Sharing

Identity-based Cloud Storage Auditing for Data Sharing with Access Control of Sensitive Information

A Framework for Storage Security in Cloud Computing

Secure Data Access and Sharing Scheme for Cloud Storage

CryptCloud$^+$+: Secure and Expressive Data Access Control for Cloud Storage

Dual Access Control for Cloud-Based Data Storage and Sharing

Cryptanalysis of Wang’s Auditing Protocol for Data Storage Security in Cloud Computing

Ensuring Data Storage Security in Cloud Computing.

An Effective Approach for the Protection of Privacy Text Data in the CloudDB

Researches on Architecture Extensions for Cloud Security

Research on Cloud Storage Access Control System

Preventing Data Leakage in a Cloud Environment

Shared Authority Based Privacy-Preserving Authentication Protocol in Cloud Computing

A privacy protection approach for XML-based archives management in a cloud environment

A Software Watermark Based Architecture for Cloud Security

Privacy protection and sharing on cloud storage platform based on key tree