SWAT: A System-Wide Approach to Tunable Leakage Mitigation in Encrypted Data Stores

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Zheng, Leqian, Xu, Lei, Wang, Cong, Wang, Sheng, Hu, Yuke, Qin, Zhan, Li, Feifei, Ren, Kui
Format: Preprint
Veröffentlicht: 2023
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866912001334181888
author Zheng, Leqian
Xu, Lei
Wang, Cong
Wang, Sheng
Hu, Yuke
Qin, Zhan
Li, Feifei
Ren, Kui
author_facet Zheng, Leqian
Xu, Lei
Wang, Cong
Wang, Sheng
Hu, Yuke
Qin, Zhan
Li, Feifei
Ren, Kui
contents Numerous studies have underscored the significant privacy risks associated with various leakage patterns in encrypted data stores. While many solutions have been proposed to mitigate these leakages, they either (1) incur substantial overheads, (2) focus on specific subsets of leakage patterns, or (3) apply the same security notion across various workloads, thereby impeding the attainment of fine-tuned privacy-efficiency trade-offs. In light of various detrimental leakage patterns, this paper starts with an investigation into which specific leakage patterns require our focus in the contexts of key-value, range-query, and dynamic workloads, respectively. Subsequently, we introduce new security notions tailored to the specific privacy requirements of these workloads. Accordingly, we propose and instantiate SWAT, an efficient construction that progressively enables these workloads, while provably mitigating system-wide leakage via a suite of algorithms with tunable privacy-efficiency trade-offs. We conducted extensive experiments and compiled a detailed result analysis, showing the efficiency of our solution. SWATis about an order of magnitude slower than an encryption-only data store that reveals various leakage patterns and is two orders of magnitude faster than a trivial zero-leakage solution. Meanwhile, the performance of SWATremains highly competitive compared to other designs that mitigate specific types of leakage.
format Preprint
id arxiv_https___arxiv_org_abs_2306_16851
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle SWAT: A System-Wide Approach to Tunable Leakage Mitigation in Encrypted Data Stores
Zheng, Leqian
Xu, Lei
Wang, Cong
Wang, Sheng
Hu, Yuke
Qin, Zhan
Li, Feifei
Ren, Kui
Cryptography and Security
Numerous studies have underscored the significant privacy risks associated with various leakage patterns in encrypted data stores. While many solutions have been proposed to mitigate these leakages, they either (1) incur substantial overheads, (2) focus on specific subsets of leakage patterns, or (3) apply the same security notion across various workloads, thereby impeding the attainment of fine-tuned privacy-efficiency trade-offs. In light of various detrimental leakage patterns, this paper starts with an investigation into which specific leakage patterns require our focus in the contexts of key-value, range-query, and dynamic workloads, respectively. Subsequently, we introduce new security notions tailored to the specific privacy requirements of these workloads. Accordingly, we propose and instantiate SWAT, an efficient construction that progressively enables these workloads, while provably mitigating system-wide leakage via a suite of algorithms with tunable privacy-efficiency trade-offs. We conducted extensive experiments and compiled a detailed result analysis, showing the efficiency of our solution. SWATis about an order of magnitude slower than an encryption-only data store that reveals various leakage patterns and is two orders of magnitude faster than a trivial zero-leakage solution. Meanwhile, the performance of SWATremains highly competitive compared to other designs that mitigate specific types of leakage.
title SWAT: A System-Wide Approach to Tunable Leakage Mitigation in Encrypted Data Stores
topic Cryptography and Security
url https://arxiv.org/abs/2306.16851