Practical Attacks on Relational Databases Protected via Searchable Encryption

Mohamed Ahmed Abdelraheem; Tobias Andersson; Christian Gehrmann; Cornelius Glackin

doi:10.1007/978-3-319-99136-8_10

Practical Attacks on Relational Databases Protected via Searchable Encryption

Mohamed Ahmed Abdelraheem, Tobias Andersson, Christian Gehrmann, Cornelius Glackin

Forskningsoutput: Kapitel i bok/rapport/Conference proceeding › Konferenspaper i proceeding › Peer review

Sammanfattning

Searchable symmetric encryption (SSE) schemes are commonly proposed to enable search in a protected unstructured documents such as email archives or any set of sensitive text files. However, some SSE schemes have been recently proposed in order to protect relational databases. Most of the previous attacks on SSE schemes have only targeted its common use case, protecting unstructured data. In this work, we propose a new inference attack on relational databases protected via SSE schemes. Our inference attack enables a passive adversary with only basic knowledge about the meta-data information of the target relational database to recover the attribute names of some observed queries. This violates query privacy since the attribute name of a query is secret.

Originalspråk	engelska
Titel på värdpublikation	Information Security - 21st International Conference, ISC 2018, Proceedings
Redaktörer	Liqun Chen, Mark Manulis, Steve Schneider
Förlag	Springer
Sidor	171-191
Antal sidor	21
ISBN (tryckt)	9783319991351
DOI	https://doi.org/10.1007/978-3-319-99136-8_10
Status	Published - 2018
Evenemang	21st Information Security Conference, ISC 2018 - Guildford, Storbritannien Varaktighet: 2018 sep. 9 → 2018 sep. 12

Publikationsserier

Namn	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volym	11060 LNCS
ISSN (tryckt)	0302-9743
ISSN (elektroniskt)	1611-3349

Konferens

Konferens	21st Information Security Conference, ISC 2018
Land/Territorium	Storbritannien
Ort	Guildford
Period	2018/09/09 → 2018/09/12

Ämnesklassifikation (UKÄ)

Systemvetenskap, informationssystem och informatik

Tillgång till dokument

10.1007/978-3-319-99136-8_10

Sec4Factory: Cybersäkerhet för nästa generations fabrik (SEC4FACTORY)
Gehrmann, C. (PI), Kihl, M. (CoPI), Hell, M. (CoI), Fitzgerald, E. (Forskare), Toorani, M. (Forskare), Fitzgerald, E. (Forskare), Tärneberg, W. (Forskare) & Akbarian, F. (Forskare)
Stiftelsen för Strategisk Forskning, SSF
2018/04/01 → 2024/12/31
Projekt: Forskning
CloudiFacturing: Cloudification of Production Engineering for Predictive Digital Manufacturing
Gehrmann, C. (PI)
European Commission - Horizon 2020
2017/10/01 → 2021/03/31
Projekt: Forskning

Citera det här

Abdelraheem, M. A., Andersson, T., Gehrmann, C., & Glackin, C. (2018). Practical Attacks on Relational Databases Protected via Searchable Encryption. I L. Chen, M. Manulis, & S. Schneider (Red.), Information Security - 21st International Conference, ISC 2018, Proceedings (s. 171-191). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11060 LNCS). Springer. https://doi.org/10.1007/978-3-319-99136-8_10

Abdelraheem, Mohamed Ahmed ; Andersson, Tobias ; Gehrmann, Christian et al. / Practical Attacks on Relational Databases Protected via Searchable Encryption. Information Security - 21st International Conference, ISC 2018, Proceedings. redaktör / Liqun Chen ; Mark Manulis ; Steve Schneider. Springer, 2018. s. 171-191 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{4caa6e7a10ab4421906e12c454a4dee2,

title = "Practical Attacks on Relational Databases Protected via Searchable Encryption",

abstract = "Searchable symmetric encryption (SSE) schemes are commonly proposed to enable search in a protected unstructured documents such as email archives or any set of sensitive text files. However, some SSE schemes have been recently proposed in order to protect relational databases. Most of the previous attacks on SSE schemes have only targeted its common use case, protecting unstructured data. In this work, we propose a new inference attack on relational databases protected via SSE schemes. Our inference attack enables a passive adversary with only basic knowledge about the meta-data information of the target relational database to recover the attribute names of some observed queries. This violates query privacy since the attribute name of a query is secret.",

author = "Abdelraheem, {Mohamed Ahmed} and Tobias Andersson and Christian Gehrmann and Cornelius Glackin",

year = "2018",

doi = "10.1007/978-3-319-99136-8_10",

language = "English",

isbn = "9783319991351",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer",

pages = "171--191",

editor = "Liqun Chen and Mark Manulis and Steve Schneider",

booktitle = "Information Security - 21st International Conference, ISC 2018, Proceedings",

address = "Germany",

note = "21st Information Security Conference, ISC 2018 ; Conference date: 09-09-2018 Through 12-09-2018",

}

Abdelraheem, MA, Andersson, T, Gehrmann, C & Glackin, C 2018, Practical Attacks on Relational Databases Protected via Searchable Encryption. i L Chen, M Manulis & S Schneider (red), Information Security - 21st International Conference, ISC 2018, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 11060 LNCS, Springer, s. 171-191, 21st Information Security Conference, ISC 2018, Guildford, Storbritannien, 2018/09/09. https://doi.org/10.1007/978-3-319-99136-8_10

Practical Attacks on Relational Databases Protected via Searchable Encryption. / Abdelraheem, Mohamed Ahmed; Andersson, Tobias; Gehrmann, Christian et al.
Information Security - 21st International Conference, ISC 2018, Proceedings. red. / Liqun Chen; Mark Manulis; Steve Schneider. Springer, 2018. s. 171-191 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11060 LNCS).

Forskningsoutput: Kapitel i bok/rapport/Conference proceeding › Konferenspaper i proceeding › Peer review

TY - GEN

T1 - Practical Attacks on Relational Databases Protected via Searchable Encryption

AU - Abdelraheem, Mohamed Ahmed

AU - Andersson, Tobias

AU - Gehrmann, Christian

AU - Glackin, Cornelius

PY - 2018

Y1 - 2018

N2 - Searchable symmetric encryption (SSE) schemes are commonly proposed to enable search in a protected unstructured documents such as email archives or any set of sensitive text files. However, some SSE schemes have been recently proposed in order to protect relational databases. Most of the previous attacks on SSE schemes have only targeted its common use case, protecting unstructured data. In this work, we propose a new inference attack on relational databases protected via SSE schemes. Our inference attack enables a passive adversary with only basic knowledge about the meta-data information of the target relational database to recover the attribute names of some observed queries. This violates query privacy since the attribute name of a query is secret.

AB - Searchable symmetric encryption (SSE) schemes are commonly proposed to enable search in a protected unstructured documents such as email archives or any set of sensitive text files. However, some SSE schemes have been recently proposed in order to protect relational databases. Most of the previous attacks on SSE schemes have only targeted its common use case, protecting unstructured data. In this work, we propose a new inference attack on relational databases protected via SSE schemes. Our inference attack enables a passive adversary with only basic knowledge about the meta-data information of the target relational database to recover the attribute names of some observed queries. This violates query privacy since the attribute name of a query is secret.

U2 - 10.1007/978-3-319-99136-8_10

DO - 10.1007/978-3-319-99136-8_10

M3 - Paper in conference proceeding

AN - SCOPUS:85053994380

SN - 9783319991351

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 171

EP - 191

BT - Information Security - 21st International Conference, ISC 2018, Proceedings

A2 - Chen, Liqun

A2 - Manulis, Mark

A2 - Schneider, Steve

PB - Springer

T2 - 21st Information Security Conference, ISC 2018

Y2 - 9 September 2018 through 12 September 2018

ER -

Abdelraheem MA, Andersson T, Gehrmann C, Glackin C. Practical Attacks on Relational Databases Protected via Searchable Encryption. I Chen L, Manulis M, Schneider S, redaktörer, Information Security - 21st International Conference, ISC 2018, Proceedings. Springer. 2018. s. 171-191. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-319-99136-8_10

Practical Attacks on Relational Databases Protected via Searchable Encryption

Sammanfattning

Publikationsserier

Konferens

Ämnesklassifikation (UKÄ)

Tillgång till dokument

Fingeravtryck

Projekt

Sec4Factory: Cybersäkerhet för nästa generations fabrik (SEC4FACTORY)

CloudiFacturing: Cloudification of Production Engineering for Predictive Digital Manufacturing

Citera det här