암호화된 클라우드 데이터의 중복제거 기법에 대한 부채널 공격
Side-Channel Attack against Secure Data Deduplication over Encrypted Data in Cloud Storage
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
클라우드 환경에서 대량으로 발생하는 데이터들에 대해 효율적인 저장 공간을 제공하는 기법으로 단일의 데이터만을 저장하여 중복을 제거하는 중복제거 기법을 활용할 수 있다. 위탁 데이터에 대한 기밀성에 민감한 사용자들은 안전한 암호 알고리즘을 이용 가능하지만 중복제거 기법의 효율성을 떨어뜨린다는 단점을 가지고 있다. 사용자의 데이터 프라이버시를 보장하면서 저장 공간의 효율성을 올리기 위해 2015년에PAKE(Password Authenticated Key Exchange) 프로토콜을 활용한 서버 측면의 사용자간 중복제거기법이 제안되었다. 본 논문에서는 부채널을 통하여 제안된 기법이 CoF(Confirmation-of-File) 또는 중복확인 공격(ducplicate identification attack)에 대해 안전하지 않음을 증명한다.
Abstract
Data deduplication can be utilized to reduce storage space in cloud storage services by storing only a single copy of data rather than all duplicated copies. Users who are concerned the confidentiality of their outsourced data can use secure encryption algorithms, but it makes data deduplication ineffective. In order to reconcile data deduplication with encryption, Liu et al. proposed a new server-side cross-user deduplication scheme by exploiting password authenticated key exchange (PAKE) protocol in 2015. In this paper, we demonstrate that this scheme has side channel which causes insecurity against the confirmation-of-file (CoF), or duplicate identification attack.
참고문헌 (20)
- Dutch T. Meyer, "A study of practical deduplication", Proceedings of the 9th USENIX Conference on File and Storage Technologies, pp.1~1 (2011)
- Mark W. Storer, "Secure data deduplication", Proceedings of the 4th ACM international workshop on Storage security and survivability, pp.1~10 (2008)
- J. R. Douceur, "Reclaiming space from duplicate files in a serverless distributed file system", Proceedings of the 22nd International Conference on Distributed Computing Systems, pp.617~624 (2002)
- M. Bellare, "Dupless : server-aided encryption for deduplicated storage", Presented as part of the 22nd USENIX Security Symposium, pp.179~194 (2013)
- P. Puzio, "ClouDedup : secure deduplication with encrypted data for cloud storage", 2013 IEEE 5th International Conference on Cloud Computing Technology and Science(CloudCom), pp.363~370 (2013)
- J. Stanek, "A secure data deduplication scheme for cloud storage", 18th International Conference on Financial Cryptography and Data Security, pp.99~118 (2014)
- Yitao Duan, "Distributed key generation for encrypted deduplication : achieving the strongest privacy", Proceedings of the 6th edition of the ACM Workshop on Cloud Computing Security(CCSW), pp.57~68 (2014)
- J. Camenisch, "Simulatable adaptive oblivious transfer", Proceedings of the 26th Annual International Conference on Advances in Cryptology(EUROCRYPT), pp.573~590 (2007)
- J. Liu, "Secure deduplication of encrypted data without additional independent servers", Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security(CCS), pp.874~885 (2015)
- S.M. Bellovin, "Encrypted key exchange : password-based protocols secure against dictionary attacks", IEEE Computer Society Symposium on Research in Security and Privacy, pp.72~84 (1992)
- T. ElGamal, "A public key cryptosystem and a signature scheme based on discret logarithms", Proceedings of Advances in Cryptology(CRYPTO), pp.10~18 (1985)
- P. Paillier, "Public-key cryptosystems based on composite degree residuosity classes", Proceedings of the 17th international conference on Theory and Application of Cryptographic Techniques(EUROCRYPT), pp.223~238 (1999)
- M. Abdalla, "Simple password-based encrypted key exchange protocols", Proceeding of the Cryptographers’ Track at the RSA Conference(CT-RSA), pp.191~208 (2005)
- D. Harnik, "Side channels in cloud services : Deduplication in cloud storage", IEEE Security and Privacy, 8(6), pp.40~47 (2010)
- M. Bellare, "Message-locked encryption and secure deduplication", 32nd Annual International Conference on the Theory and Applications of Cryptographic Techniques(EUROCRYPT), pp.296~312 (2013)
- A. Jain, "Biometrics : A tool for information security", IEEE Transactions on Information Forensics and Security, 1(2), pp.125~143 (2006)
- Daniel V. Klein, "Foiling the cracker : A survey of, and improvements to, password security", Proceedings of the 2nd USENIX Security Workshop, pp.5~14 (1990)
- Zheng Yan, "Encrypted data management with deduplication in cloud computing", IEEE Cloud Computing, 3(2), pp.28~35 (2016)
- P. Puzio, "PerfectDedup : secure data deduplication", International Workshop on Data Privacy Management, pp.150~166 (2015)
- Youngjoo Shin, "A survey of secure data deduplication schemes for cloud storage systems", ACM Computing Surveys (CSUR), 49(74) (2017)