Abstract:In recent years, we have witnessed an upsurge in cyber-attacks and data breach incidents that put tremendous data at risk, affect millions of users, and cause severe economic losses. As an in-depth defence to counter the persistent and pervasive security threats, maintaining data in always encrypted form is becoming a trend and even a regulatory requirement. Satisfying the demand is particularly challenging in the context of databases, which, as a pillar in modern computing infrastructure, provide indispensable means to organize, store and retrieve data at different scales. The difficulty lies in how to perform the database query processing over encrypted data while meeting the requirements of security, performance, and complex query functions. This field has grown tremendously over the past two decades, though there is no dominant solution that is universally applicable. Solutions based on cryptographic techniques, e.g., searchable encryption or property-preserving encryption, can efficiently provide certain primitive operations for database queries. But studies have shown that their allowed leakage profiles can be (sometimes highly) exploitable. The recent advent of secure hardware enclaves opens up new opportunities. Yet, the first few enclave-based proposals mostly explore extreme design points that rest on strong assumptions (e.g., huge enclave) or result in weak security (e.g., leaking relations of ciphertexts). In this talk, we will overview these latest advancements and the potential challenges, respectively, and discuss the possible roadmap ahead towards practically more secure, efficient and functional encrypted databases.

Toward Fully Functional Encrypted Databases

Encrypted Databases: Progresses and Challenges

Recent Advancements on Functionality and Performance

Searchable Encryption Semantics

On the Interoperability of Encrypted Databases

Fundamental Cryptographic Algorithms and Technologies

SQL queries over encrypted databases: a survey

Enc2DB: A Hybrid and Adaptive Encrypted Query Processing Framework

Passive Attacks Against Searchable Encryption.

Attribute-Based Searchable Encryption: A Survey

T-DB: Toward Fully Functional Transparent Encrypted Databases in DBaaS Framework

Enabling Central Keyword-Based Semantic Extension Search over Encrypted Outsourced Data.

An enhanced wildcard-based fuzzy searching scheme in encrypted databases

Server-aided searchable encryption in multi-user setting

Privacy-Preserving Queries On Encrypted Data

Cryptanalysis of an Encrypted Database in SIGMOD '14

<i>HEDA</i>: Multi-Attribute Unbounded Aggregation over Homomorphically Encrypted Database

Efficient Method of Querying Encrypted Data

Attribute-Based Access Control Meets Blockchain-Enabled Searchable Encryption: A Flexible and Privacy-Preserving Framework for Multi-User Search

A Survey on Techniques of Database Encryption and Query over Encrypted Data