Abstract:Symmetric searchable encryption (SSE) schemes are preferred over asymmetric ones for their lower computational cost. Owing to the big data size of most of the cloud applications, SSE with keyword search often yields a large number of search results matching the search criterion, but only a small portion of them is of actual interest. This results in unnecessary increase of network traffic. A customized search against a phrase instead of keywords can yield more specific and relevant search results and can reduce the network traffic. This motivates the idea of phrase search in SSE. Most of the existing symmetric key searchable encryption schemes either do not support phrase search or have unwanted leakage associated with them. In this paper, we propose a symmetric key searchable encryption scheme for phrase search that minimizes the leakage of information from search pattern and access pattern. We propose a probabilistic trapdoor generation algorithm for phrase search and thereby prevent the leakage due to search pattern. In earlier SSE based schemes, an honest-butcurious server could always learn about the position of the sentences and keywords in the encrypted text after the search operation is performed. This is referred to as the leakage from access pattern. This may turn out to be a significant security concern owing to the prior knowledge of positions of certain sentences and keywords in certain documents. In this paper, we provide the access pattern secure encryption scheme such that, an honest-but-curious cloud server could not learn anything about the position of the phrase in the sentence even after the search. We implement a prototype of our scheme and validate it against commercial data and provide security and performance analysis to demonstrate its practicality.

Security Impact of Leakage Profiles: Threats and Countermeasures

Passive Attacks Against Searchable Encryption.

Interpreting and Mitigating Leakage-Abuse Attacks in Searchable Symmetric Encryption

VAL: Volume and Access Pattern Leakage-Abuse Attack with Leaked Documents

Leakage Models and Inference Attacks on Searchable Encryption for Cyber-Physical Social Systems.

Security Policy for Information Erasing and Leaking in Multithreaded Codes

Hiding the Access Pattern is Not Enough: Exploiting Search Pattern Leakage in Searchable Encryption

LEAP - Leakage-Abuse Attack on Efficiently Deployable, Efficiently Searchable Encryption with Partially Known Dataset.

Privacy-preserving Searchable Databases with Controllable Leakage

d-DSE: Distinct Dynamic Searchable Encryption Resisting Volume Leakage in Encrypted Databases

SWAT: A System-Wide Approach to Tunable Leakage Mitigation in Encrypted Data Stores

A secure index resisting keyword privacy leakage from access and search patterns in searchable encryption

A New Leakage Resilient Symmetric Searchable Encryption Scheme for Phrase Search

On the Security of Verifiable Searchable Encryption Schemes

Enabling Search over Encrypted Cloud Data with Concealed Search Pattern.

Controlled Secret Leakage

Query Recovery Attacks on Searchable Encryption Based on Partial Knowledge

Achieving Searchable Encryption Scheme With Search Pattern Hidden

Eurus: Towards an Efficient Searchable Symmetric Encryption with Size Pattern Protection

SAP-SSE: Protecting Search Patterns and Access Patterns in Searchable Symmetric Encryption