基于差分隐私模型的云数据副本安全控制方案

任君; 熊金波; 姚志强

doi:10.11959/j.issn.2096-109x.2017.00163

您当前的位置：

首页 >

文章列表页 >

基于差分隐私模型的云数据副本安全控制方案

学术论文 | 更新时间：2024-06-03

- 基于差分隐私模型的云数据副本安全控制方案
- Security control scheme for cloud data copy based on differential privacy model
- 网络与信息安全学报 2017年3卷第5期页码：38-46
- 作者机构：
  
  1. 福建师范大学软件学院，福建福州 350108
  2. 福建省公共服务大数据挖掘与应用工程技术研究中心，福建福州 350108
- 作者简介：
  
  [ "任君（1993-），女，山西临汾人，福建师范大学硕士生，主要研究方向为云计算与安全服务。" ]
  [ "熊金波（1981-），男，湖南益阳人，福建师范大学副教授、硕士生导师，主要研究方向为云数据安全与隐私保护技术。" ]
  [ "姚志强（1967-），男，福建莆田人，博士，福建师范大学教授、硕士生导师，主要研究方向为信息安全。" ]
- 基金信息：
  
  国家自然科学基金资助项目;The National Natural Science Foundation of China(61370078);国家自然科学基金资助项目;The National Natural Science Foundation of China(61402109)
- DOI：10.11959/j.issn.2096-109x.2017.00163
  中图分类号： TP393
- 网络首发：2017-05，
  
  纸质出版：2017-05-15
- 稿件说明：
移动端阅览
任君, 熊金波, 姚志强. 基于差分隐私模型的云数据副本安全控制方案[J]. 网络与信息安全学报, 2017,3(5):38-46.

Jun REN, Jin-bo XIONG, Zhi-qiang YAO. Security control scheme for cloud data copy based on differential privacy model[J]. Chinese Journal of Network and Information Security, 2017, 3(5): 38-46.
任君, 熊金波, 姚志强. 基于差分隐私模型的云数据副本安全控制方案[J]. 网络与信息安全学报, 2017,3(5):38-46. DOI： 10.11959/j.issn.2096-109x.2017.00163.

Jun REN, Jin-bo XIONG, Zhi-qiang YAO. Security control scheme for cloud data copy based on differential privacy model[J]. Chinese Journal of Network and Information Security, 2017, 3(5): 38-46. DOI： 10.11959/j.issn.2096-109x.2017.00163.

摘要

针对敌手利用重复数据删除作为侧信道攻击用户隐私信息的问题，提出一种安全的文件副本数量控制方案。核心思想是构建混合云架构，结合差分隐私中的隐私保护参数及收敛加密算法计算文件密钥值并对其进行二次加密，保证每个文件在服务器中只存有一个副本。与已有的通过设置阈值来控制副本数量的方案进行比较分析，所提方案可抵抗侧信道攻击、相关文件的攻击，以及针对加密算法的特定攻击，并节约了网络带宽及磁盘存储空间。

Abstract

In cloud computing environment

adversary may use data deduplication as a side channel to eavesdrop users’ privacy.In order to tackle this serious issue

a secure copy number control scheme was proposed.The highlights of the proposed scheme lie in constructing a hybrid cloud framework.Then file was encrypted for second times by using the privacy protection parameters of differential privacy as well as the key of the file computed by convergent encryption algorithm.After the file is uploaded

each file has only one copy in the server.Meanwhile

compared with the scheme that use setting threshold value to control the number of copies

the proposed scheme can resist against the side channel attack

related files attack

and the specific attack of encryption algorithm and save the network bandwidth and disk storage space.

关键词

Keywords

references

MEHMOOD A , NATGUNANATHAN I , XIANG Y , et al . Protection of big data privacy [J ] . IEEE Access , 2016 , 4 : 1821 - 1834 .

冯登国 , 张敏 , 李昊 . 大数据安全与隐私保护 [J ] . 计算机学报 , 2014 , 37 ( 1 ): 246 - 258 .

FENG D G , ZHANG M , LI H . Big data security and privacy protection [J ] . Chinese Journal of Computers , 2014 , 37 ( 1 ): 246 - 258 .

MAI J E . Big data privacy:the datafication of personal informa tion [J ] . Information Society , 2016 , 32 ( 3 ): 192 - 199 .

熊金波 , 张媛媛 , 李凤华 , 等 . 云环境中数据安全去重研究进展 [J ] . 通信学报 , 2016 , 37 ( 11 ): 169 - 180 .

XIONG J B , ZHANG Y Y , LI F H , et al . Research progress on secure data deduplication in cloud [J ] . Journal on Communications , 2016 , 37 ( 11 ): 169 - 180 .

PAULO J , PEREIRA J . A survey and classification of storage deduplication systems [J ] . ACM Computing Surveys (CSUR) , 2014 , 47 ( 1 ): 11 .

RUSSELL D . Data deduplication will be even bigger in 2010 [J ] . Gartner , 2010 .

SORIA-COMAS J , DOMINGO-FERRER J . Big data privacy:challenges to privacy principles and models [J ] . Data Science and Engineering , 2016 , 1 ( 1 ): 21 - 28 .

DOUCEUR J R , ADYA A , BOLOSKY W J , et al . Reclaiming space from duplicate files in a serverless distributed file system [C ] // The International Conference on Distributed Computing Systems . 2002 : 617 - 624 .

LI M , QIN C , LEE P P C . CDStore:toward reliable,secure,and costefficient cloud storage via convergent dispersal [C ] // 2015 USENIX Annual Technical Conference (USENIX ATC 15) . 2015 : 111 - 124 .

STANEK J , SORNIOTTI A , ANDROULAKI E , et al . A secure data deduplication scheme for cloud storage [C ] // Financial Cryptography and Data Security . 2014 : 99 - 118 .

BELLARE M , KEELVEEDHI S , RISTENPART T . Message-locked encryption and secure deduplication [C ] // Advances in Cryptology–EUROCRYPT . 2013 : 296 - 312 .

KEELVEEDHI S , BELLARE M , RISTENPART T . DupLESS:server-aided encryption for deduplicated storage [C ] // The 22nd USENIX Security Symposium . 2013 : 179 - 194 .

HARNIK D , PINKAS B,SHULMAN-PELEG A . Side channels in cloud services:deduplication in cloud storage [J ] . IEEE Security ＆Privacy , 2010 , 8 ( 6 ): 40 - 47 .

LEE S , CHOI D . Privacy-preserving cross-user sourcebased data deduplication in cloud storage [C ] // The International Conference on ICT Convergence . 2012 : 329 - 330 .

OLIVIER , NEUMANN C , MONTALVO L , et al . Improving the resistance to side-channel attacks on cloud storage services [C ] // The International Conference on New Technologies,Mobility and Security (NTMS’12) . 2012 : 1 - 5 .

DWORK C . Differential privacy [J ] . Lecture Notes in Computer Science , 2006 ,( 2 ): 1 - 12 .

熊平 , 朱天清 , 王晓峰 . 差分隐私保护及其应用 [J ] . 计算机学报 , 2014 , 37 ( 1 ): 101 - 122 .

XIONG P , ZHU T Q , WANG X F . A survey on differential privacy and applications [J ] . Chinese Journal of Computers , 2014 , 37 ( 1 ): 101 - 122 .

EBADI H , SANDS D , SCHNEIDER G . Differential privacy:now it's getting personal [J ] . ACM Special Interest Group on Programming Languages , 2015 , 50 ( 1 ): 69 - 81 .

GENG Q , KAIROUZ P , OH S , et al . The staircase mechanism in differential privacy [J ] . IEEE Journal of Selected Topics in Signal Processing , 2015 , 9 ( 7 ): 1 .

浏览量

2823

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

DP-FedDRC：缓解维度坍塌的差分隐私个性化联邦学习

FLWD:基于联邦学习的Webshell检测方法

激励驱动的联邦学习研究综述：隐私与安全

轨迹数据的差分隐私保护方法综述

差分隐私的隐私观与隐私目标