d-DSE: Distinct Dynamic Searchable Encryption Resisting Volume Leakage in Encrypted Databases
arxiv(2024)
摘要
Dynamic Searchable Encryption (DSE) has emerged as a solution to efficiently
handle and protect large-scale data storage in encrypted databases (EDBs).
Volume leakage poses a significant threat, as it enables adversaries to
reconstruct search queries and potentially compromise the security and privacy
of data. Padding strategies are common countermeasures for the leakage, but
they significantly increase storage and communication costs. In this work, we
develop a new perspective to handle volume leakage. We start with distinct
search and further explore a new concept called distinct DSE
(d-DSE).
We also define new security notions, in particular Distinct with
Volume-Hiding security, as well as forward and backward privacy, for the new
concept. Based on d-DSE, we construct the d-DSE designed EDB
with related constructions for distinct keyword (d-KW-dDSE), keyword
(KW-dDSE), and join queries (JOIN-dDSE) and update queries in
encrypted databases. We instantiate a concrete scheme ,
employing Symmetric Revocable Encryption. We conduct extensive experiments on
real-world datasets, such as Crime, Wikipedia, and Enron, for performance
evaluation. The results demonstrate that our scheme is practical in data search
and with comparable computational performance to the SOTA DSE scheme
(*, ) and padding strategies (,
). Furthermore, our proposal sharply reduces the communication
cost as compared to padding strategies, with roughly 6.36 to 53.14x advantage
for search queries.
更多查看译文
AI 理解论文
溯源树
样例
生成溯源树,研究论文发展脉络
Chat Paper
正在生成论文摘要