大数据安全保护技术综述

魏凯敏; 翁健; 任奎

doi:10.11959/j.issn.2096-109x.2016.00046

您当前的位置：

首页 >

文章列表页 >

大数据安全保护技术综述

综述 | 更新时间：2024-06-03

- 大数据安全保护技术综述
- Data security and protection techniques in big data:a survey
- 网络与信息安全学报 2016年2卷第4期页码：1-11
- 作者机构：
  
  1. 暨南大学网络空间安全学院，广东广州 510632
  2. 纽约州立大学布法罗分校计算机科学与工程学院，纽约布法罗 14260
- 作者简介：
  
  [ "魏凯敏（1984-），男，湖南株洲人，博士，暨南大学副研究员，主要研究方向为移动网络算法分析与设计、移动网络安全。" ]
  [ "翁健（1976-），男，广东茂名人，暨南大学教授、博士生导师，主要研究方向为密码学与信息安全。" ]
  [ "任奎（1978-），男，安徽巢湖人，纽约州立大学布法罗分校系教授，主要研究方向为云计算中的数据安全、计算服务外包安全、无线系统安全、隐私保护、物联网系统与安全。" ]
- 基金信息：
  
  国家自然科学基金资助项目;The National Natural Science Foundation of China(61272413);国家自然科学基金资助项目;The National Natural Science Foundation of China(61472165);国家自然科学基金资助项目;The National Natural Science Foundation of China(61502202);教育部高等学校博士学科点专项科研基金博导类基金资助项目;The Research Fund for the Doctoral Program of Higher Education of China(20134401110011)
- DOI：10.11959/j.issn.2096-109x.2016.00046
  中图分类号： TP393
- 网络首发：2016-04，
  
  纸质出版：2016-04-15
- 稿件说明：
移动端阅览
魏凯敏, 翁健, 任奎. 大数据安全保护技术综述[J]. 网络与信息安全学报, 2016,2(4):1-11.

Kai-min WEI, Jian WENG, Kui REN. Data security and protection techniques in big data:a survey[J]. Chinese Journal of Network and Information Security, 2016, 2(4): 1-11.
魏凯敏, 翁健, 任奎. 大数据安全保护技术综述[J]. 网络与信息安全学报, 2016,2(4):1-11. DOI： 10.11959/j.issn.2096-109x.2016.00046.

Kai-min WEI, Jian WENG, Kui REN. Data security and protection techniques in big data:a survey[J]. Chinese Journal of Network and Information Security, 2016, 2(4): 1-11. DOI： 10.11959/j.issn.2096-109x.2016.00046.

摘要

目前，大数据受到社会各界的广泛关注。受数据体量大、结构多样化、处理迅速快等因素影响，大多数传统的数据安全保护技术不再适用于大数据环境，着使得大数据安全问题日益严重。为此，近些年提出了大量的大数据安全保护技术。从加密算法、完整性校验、访问控制技术、密文数据去重和可信删除、密文搜索等视角，对当前大数据安全保护关键技术的研究现状进行分类阐述，分析其优缺点，并探讨它们未来发展趋势。

Abstract

Big Data has attracted tremendous attention from all over the world nowadays.Its sheer volume

complex structure and realtime processing requirements often obsolete traditional technologies when coming to provide suffi-cient security protection.To address this challenge

significant research efforts have been carried out by the research community since recent years.Different technical aspects of big data security

including encryption algorithms

data integrity auditing

access control

secure data duplication

assured deletion

and secure search were surveyed

and in-depth discussions on their pros and cons were provided.Various future research directions were also discussed.

关键词

Keywords

references

TAYLOR J . What is big data? [EB/OL ] . http://www-01.ibm.com/software/data/bigdata http://www-01.ibm.com/software/data/bigdata

AGRAWAL D , BERNSTEIN P . hallenges and opportunities with big data [R ] . 2012 .

Big data [EB/OL ] . http://www.villanovau.com/resources/bi/what-is-big-data/ http://www.villanovau.com/resources/bi/what-is-big-data/ .

HASHEM I A T , YAQOOB I , ANUAR N B , et al . The rise of “big data” on cloud computing:review and open research is-sues [J ] . Information Systems , 2015 , 47 ( 47 ): 98 - 115 .

LI G J , CHENG X Q . Research status and scientific thinking of big data [J ] . Bulletin of Chinese Academy of Sciences , 2012 , 27 ( 6 ): 647 - 657 .

HUDIC A , ISLAM S , KIESEBERG P , et al . Data confidentiality using fragmentation in cloud computing [J ] . International Journal of Pervasive Computing＆Communication , 2013 , 9 ( 1 ): 37 - 51 .

ATENIESE G , BURNS R , et al . Provable data possession at un-trusted stores [C ] // The 14th ACM Conference on Computer and Communications Security . c 2007 : 598 - 609 .

Nirvanix cloud . Why nirvanix [EB/OL ] . http://www.nirvanix.com/company/why-nirvanix.aspx http://www.nirvanix.com/company/why-nirvanix.aspx .

SAHAI A , WATERS B . Fuzzy Identity-based encryption [R ] . Lec-ture Notes in Computer Science 3494 , 2004 : 457 - 473 .

GOYAl V , PANDEY O , SAHAI A , et al . Attribute-based encryption for fine-grained access control of encrypted data [C ] // ACM CSS . c 2006 : 89 - 98 .

YU S , WANG C , REN K , et al . Achieving secure,scalable and fine-grained data access control in cloud computing [C ] // IEEE In-focom . c 2010 : 15 - 19 .

LI J , ZHAO G , CHEN X , et al . Fine-grained data access control systems with user accountability in cloud computing[C]// [C ] // The 2nd International Conference on Cloud Computing Technology and Science,IEEE Computer Society . c 2010 : 89 - 96 .

BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy Attribute-Based Encryption[C]// [C ] // IEEE Symposium on Security and Privacy (SP '07),Berkeley . c 2007 : 321 - 334 .

CHASE M . Multi-authority attribute based encryption [R ] . Lecture Notes in Computer Science 4392.Berlin:Springer , 2007 : 515 - 534 .

HUR J , NOH D K . Attribute-Based access control with efficient revocation in data outsourcing systems [J ] . IEEE Transactions on Parallel and Distributed Systems , 2011 , 22 ( 7 ): 1214 - 1221 .

GREEN M , HOHENBERGER S , WATERS B . Outsourcing the decryption of ABE ciphertexts [C ] // The 9th USENIX Security Symp . c 2011 : 3 - 18 .

BLAZE M , BLEUMER G , STRAUSS M . Divertible protocols and atomic proxy cryptography [R ] . Lecture Notes in Computer Science 1403.Berlin:Springer , 1998 : 127 - 144 .

GREEN M , ATENIESE G . Identity-based proxy re-encryption [R ] . Lecture Notes in Computer Science 4521.Berlin Heidelberg:Springer , 2007 : 288 - 306 .

MIZUNO T , DOI H . Secure and efficient IBE-PKE proxy re-encryption [J ] . IEICE Transactions on Fundamentals of Electron-ics,Communications and Computer Science , 2011 , 94 ( 1 ): 36 - 44 .

ZHAO J , FENG D G , YANG L , et al . CCA-secure type-based proxy re-encryption without pairings [J ] . Acta Electronica Sinica , 2011 , 39 ( 11 ): 2513 - 2519 .

WU X X , XU L , ZHANG X W . A certificateless proxy re-encryption scheme for cloud-based data sharing [C ] // The 18th ACM Conference on Computer and Communications Secu-rity(CCS) . c 2011 : 869 - 871 .

LIANG K T , LIU J K , WONG D S , et al . An efficient cloud-based revocable identity-based proxy re-encryption scheme for public clouds data sharing [C ] // The 19th European Symposium on Re-search in Computer Security (ESORICS) . c 2014 : 257 - 272 .

WENG J , DENG R H , DING X H , et al . Conditional proxy re-encryption secure against chosen-ciphertext attack [C ] // The 4th International Symposium on Information,Computer,and Commu-nications Security (ASIACCS) . c 2009 . 322 - 332 .

FANG L M , SUSILO W , GE C P , et al . Chosen-ciphertext secure anonymous conditional proxy re-encryption with keyword search [J ] . Theoretical Computer Science , 2012 , 462 ( 1 ): 39 - 58 .

FANG L M , WANG J D , GE C P , et al . Fuzzy conditional proxy re-encryption [J ] . Science China Information Sciences , 2015 , 56 ( 5 ): 1 - 13 .

CHOW S , WENG J , YANG Y , et al . Efficient unidirectional proxy re-encryption [R ] . Lecture Notes in Computer Science 6055.Berlin:Springer , 2010 : 316 - 332 .

LAN C H , WANG C F . A new conditional proxy re-encryption scheme based on secret sharing [J ] . Chinese Journal of Computers , 2013 , 36 ( 4 ): 895 - 902 .

Homomorphic encryption [EB/OL ] . https://en.wikipedia.org/wiki/Homomorphic_encryption https://en.wikipedia.org/wiki/Homomorphic_encryption .

GENTRY C . Fully homomorphic encryption using ideal lat-tices [C ] // The 41st Annual ACM Symposium on Theory of Com-puting (STOC) . c 2009 : 169 - 178 .

SMART N P , VERCAUTEREN F . Fully homomorphic encryption with relatively small key and ciphertext sizes [C ] // The Public Key Cryptography (PKC) . c 2010 : 420 - 443 .

GENTRY C , HALEVI S , SMART N P . Fully homomorphic en-cryption with polylog overhead [C ] // Advances in Cryptology . c 2012 : 465 - 482 .

GENTRY C , HALEVI S , SMART N P . Better bootstrapping in fully homomorphic encryption [C ] // The Public Key Cryptography (PKC) . c 2012 : 1 - 16 .

BRAKERSKI Z , GENTRY C , HALEVI S . Packed ciphertexts in LWE-based homomorphic encryption [C ] // The Public-Key Cryp-tography (PKC) . c 2013 : 1 - 13 .

GENTRY C . Toward basing fully homomorphic encryption on worst-case hardness [C ] // Advances in Cryptolog . c 2010 : 116 - 137 .

BRAKERSKI Z , VAIKUNTANATHAN V . Fully homomorphic encryption from ring-LWE and security for key dependent mes-sages [C ] // Advances in Cryptology . c 2011 : 505 - 524 .

LOPEZ A , TROMER E , VAIKUNTANATHAN V . On-the-fly multiparty computation on the cloud via multi-key fully homomor-phic encryption [C ] // The 44th Annual ACM Symposium on Theory of Computing (STOC) . c 2012 : 1219 - 1234 .

DIJK M V , GENTRY C , HALEVI S , et al . Fully homomorphic encryption over the integers [C ] // Advances in Cryptology . c 2010 : 24 - 43 .

CORON J , MANDAL A , NACCACHE D , et al . Fully homomor-phic encryption over the integers with shorter public key [C ] // Ad-vances in Cryptology . c 2011 : 487 - 504 .

CHEON J H , CORON J , KIM J , et al . Batch fully homomorphic encryption over the integers [C ] // Advances in Cryptology . c 2013 : 315 - 335 .

ATENIESE G , BURNS R , CURTMOLA R , et al . Provable data possession at untrusted stores [C ] // The 14th ACM Conference on Computer and Communications Security (CCS) . c 2007 : 598 - 609 .

WANG C , WANG Q , REN K , et al . Privacy-preserving public auditing for data storage security in cloud computing [C ] // The 29th IEEE Infocom . c 2010 : 1 - 9 .

ZHU Y , WANG H , HU Z , et al . Dynamic audit services for integrity verification of outsourced storages in clouds [C ] // The 2011 ACM Symposium on Applied Computing (SAC) . c 2011 : 1550 - 1557 .

YANG K , JIA X . An efficient and secure dynamic auditing protocol for data storage in cloud computing [J ] . IEEE Transactions on Par-allel and Distributed Systems , 2013 , 24 ( 9 ): 1717 - 1726 .

LI N , LI T , VENKATASUBRAMANIAN S . T-Closeness:privacy beyond k-anonymity and l-diversity [C ] // The 23rd IEEE Interna-tional Conference on Data Engineering (ICDE) . c 2007 : 6 - 115 .

ZHU Q , ZHAO T , WANG S . Privacy preservation algorithm for service-oriented information search [J ] . Chinese Journal of Com-puters , 2010 , 33 ( 8 ): 1315 - 1323 .

DODIS Y , VADHAN S , WICHS D . Proofs of retrievability via hardness amplification [C ] // The 6th Theory of Cryptography Con-ference (TCC) . c 2009 : 109 - 127 .

WANG Q , WANG C , LI J , et al . Enabling public verifiability and data dynamics for storage security in cloud computing [C ] // The 14th European Symposium on Research in Computer Security (ESORICS) . c 2009 : 355 - 370 .

WANG Q , WANG C , REN K , et al . Enabling public verifiability and data dynamics for storage security in cloud computing [J ] . IEEE Transactions on Parallel and Distributed Systems , 2011 , 22 ( 5 ): 847 - 859 .

SANDHU R S , COYNE E J , FEINSTEIN H L , et al . Role-based access control models [J ] . Ansi Incits , 2009 , 4 ( 3 ): 554 - 563 .

RAY I , KUMAR M , YU L . LRBAC:a location-aware role-based access control model [C ] // The 2nd International Conference on In-formation Systems Security . c 2006 : 147 - 161 .

ZHANG Y J , FENG D G . A role-based access control model based on space,time and scale [J ] . Journal of Computer Research and De-velopment , 2010 , 47 ( 7 ): 1252 - 1260 .

Attribute-based access control [EB/OL ] . https://en.wikipedia.org/wiki/Attribute-based_access_control https://en.wikipedia.org/wiki/Attribute-based_access_control .

SUN G Z , DONG Y , LI Y . CP-ABE based data access control for cloud storage [J ] . Journal on Communications , 2011 , 32 ( 7 ): 146 − 152 .

SUSHMITA R , MILOS S , AMIYA N . Privacy preserving access control with authentication for securing data in clouds [C ] // The 12th IEEE/ACM International Symposium on Cluster,Cloud and Grid Computing . c 2012 : 556 - 563 .

LIANG X H , CAO Z F , LIN H , et al . Attribute based proxy re-encryption with delegating capabilities [C ] // The 4th International Symposium on Information,Computer and Communications Secu-rity (ASIACCS) . c 2009 : 276 - 286 .

HONG C , ZHANG M , FENG D G . AB-ACCS:a cryptographic access control scheme for cloud storage [J ] . Journal of Computer Research and Development , 2010 , 47 ( Z1 ): 259 - 265 .

YU S C , WANG C , REN K , et al . Attribute based data sharing with attribute revocation [C ] // The 5th International Symposium on In-formation,Computer and Communications Security (ASIACCS) . c 2010 : 261 - 270 .

YU S C , WANG C , REN K , et al . Achieving secure,scalable,and fine-grained data access control in cloud computing [C ] // The Info-com . c 2010 : 1 - 9 .

CHASE M . Multi-authority attribute based encryption [C ] // The 4th Theory of Cryptography Conference (TCC) . c 2007 : 515 - 534 .

YANG K , JIA X H . Attribute-based access control for multi-authority systems in cloud storage [C ] // The 32nd International Conference on Distributed Computing Systems . c 2012 : 536 - 545 .

LIU X J , XIA Y J , JIANG S , et al . Hierarchical attribute-based access control with authentication for outsourced data in cloud computing [C ] // The 12th International Conference on Trust,Secu-rity and Privacy in Computing and Communications,IEEE . c 2013 : 477 - 484 .

. Data deduplicaiton [EB/OL ] . https://en.wikipedia.org/wiki/Data_deduplication https://en.wikipedia.org/wiki/Data_deduplication .

DOUCEUR J R , ADYA A , BOLOSKY W J , et al . Reclaiming space from duplicate files in a serverless distributed file system [C ] // In-ternational Conference on Distributed Computing Systems . c 2002 : 617 .

STORER M W , GREENAN K , LONG D D , et al . Secure data deduplication [C ] // The 4th ACM International Workshop on Storage Security and Survivability . c 2008 : 1 - 10 .

BELLARE M , KEELVEEDHI S , RISTENPART T . Message-locked encryption and secure deduplication [M ] // EUROCRYPT.Berlin Heidelberg:Springer , 2013 : 296 - 312 .

BELLARE M , KEELVEEDHI S , RISTENPART T . DupLESS:server-aided encryption for deduplicated storage [C ] // The USENIX on Security (SEC),ACM . c 2013 : 179 - 194 .

LI J , CHEN X , LI M , et al . Secure deduplication with efficient and reliable convergent key management [J ] . IEEE Transactions on Par-allel and Distributed Systems , 25 ( 6 ): 1615 - 1625 .

ZHOU Y , FENG D , XIA W , et al . SecDep:a user-aware efficient fine-grained secure deduplication scheme with multi-level key management [C ] // IEEE MASS Storage Systems and Technologies . c 2015 : 1 - 14 .

JOUKOV N , PAPAXENOPOULOS H , ZADOK E . Secure deletion myths,issues,and solutions [C ] // ACM Workshop on Storage Secu-rity and Survivability . c 2006 : 61 - 66 .

CRESECENZO G D , FERGUSON N , IMAGLIAZZO R , et al . How to forget a secret? [C ] // The 16th Symp on Theoretical Aspects of Computer Science (STACS 1999) . c 1999 : 500 - 509 .

PERLMAN R . File system design with assured delete [C ] // IEEE International Security in Storage Workshop . c 2005 : 83 - 88 .

GEAMBASU R , KOHNO T , LEVY A , et al . Vanish:increasing data privacy with self-destructing data [C ] // The 17th USENIX Se-curity Symposium . c 2009 : 299 - 316 .

CACHIN C , HARALAMBIEV K , HSIAO H C , et al . Policy-based secure deletion [C ] // ACM Sigsac Conference on Computer ＆Communications Security . c 2013 : 259 - 270 .

SONG D X , WAGNER D , PERRIG A . Practical techniques for searches on encrypted data [C ] // The IEEE Symposium on Security and Privacy (S＆P) . c 2000 : 44 - 55 .

CURTMOLA R , GARAY J , KAMARA S , et al . Searchable sym-metric encryption:improved definitions and efficient construc-tions [C ] // The 13th ACM Conference on Computer and Communi-cations Security (CCS) . c 2006 . 79 − 88 .

LIESDONK P V , SEDGHI S , DOUMEN J , et al . Computationally efficient searchable symmetric encryption [C ] // The International Workshop on Secure Data Management (SDM) . c 2010 : 87 - 100 .

KUROSAWA K , OHTAKI Y . UC-secure searchable symmetric encryption [C ] // The 16th International Conference on Financial Cryptography and Data Security (FC) . c 2012 : 285 - 298 .

CHASE M , KAMARA S . Structured encryption and controlled disclosure [C ] // Advances in Cryptology . c 2010 : 577 - 594 .

BALLARD L , KAMARA S , MONROSE F . Achieving efficient conjunctive keyword searches over encrypted data [C ] // The 7th In-ternational Conference on Information and Communications Secu-rity (ICICS) . c 2005 : 414 - 426 .

SONG D X , WAGNER D , PERRIG A . Practical techniques for searches on encrypted data [C ] // The IEEE Symposium on Security and Privacy (S＆P 2010) . c 2010 : 44 - 55 .

LU Y B . Privacy-preserving logarithmic-time search on encrypted data in cloud [C ] // The 19th Network and Distributed System Secu-rity Symposium (NDSS 2012) . c 2012 : 1 - 17 .

STRIZHOV M , RAY I . Multi-keyword similarity search over en-crypted cloud data [M ] // ICT Systems Security and Privacy Protec-tion.Berlin Heidelberg:Springer , 2014 : 52 - 65 .

LIU C , ZHU L H , CHEN J J . Efficient searchable symmetric en-cryption for storing multiple source data on cloud [C ] // IEEE Trust-com,Bigdatase . c 2015 : 259 - 261 .

BONEH D , CRESCENZO G D , OSTROVSKY R , et al . Public key encryption with keyword search [C ] // Advances in Cryptology . c 2004 : 506 - 522 .

ABDALLA M , BELLARE M , CATALANO D , et al . Searchable encryption revisited:consistency properties,relation to anonymous IBE,and extensions [C ] // Advances in Cryptology . c 2005 : 205 - 222 .

BAEK J , SAFAVI-NAINI R , SUSILO W . Public key encryption with keyword search revisited [C ] // The International Conference on Com-putational Science and Its Applications (ICCSA) . c 2008 : 1249 - 1259 .

FANG L , SUSILO W , GE C , WANG J . A secure channel free pub-lic key encryption with keyword search scheme without random oracle [C ] // International Conference Cryptology and Network Secu-rity(CANS) . c 2009 : 248 - 258 .

BELLARE M , BOLDYREVA A , O’NEILL A . Deterministic and efficiently searchable encryption [C ] // International Cryptology Conference on Advances in Cryptology . c 2007 : 535 - 552 .

BOLDYREVA A , FEHR S , O’NEILL A . On notions of security for deterministic encryption,and efficient constructions without ran-dom oracles [C ] // International Cryptology Conference on Advances in Cryptology . c 2008 : 335 − 359 .

MIRONOV I , PANDEY O , REINGOLD O , et al . Incremental deterministic public-key encryption [M ] // Advances in Cryptology.Berlin Heidelberg:Springer , 2012 : 628 - 644 .

BONEH D , WATERS B . Conjunctive,subset,and range queries on encrypted data [C ] // The 4th Theory of Cryptography Conference (TCC) . c 2007 : 535 - 554 .

KATZ J , SAHAI A , WATERS B . Predicate encryption supporting disjunctions,polynomial equations,and inner products [C ] // Ad-vances in Cryptology . c 2008 : 146 - 162 .

浏览量

8425

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于场景感知的访问控制模型

国家自然科学基金委员会网络安全现状与展望

面向物联网设备固件的硬编码漏洞检测方法

基于GNN双源学习的访问控制关系预测方法

基于区块链的数据完整性多方高效审计机制