db-readings
db-readings copied to clipboard
Two encrypted database systems
Put two styles of encrypted databases in Trends: CryptDB that peels layers of encryption to keep the data secure while queriable; and, Cipherbase, which offloads decryption & sensitive queries to trusted hardware. These can be significant as we export more of our data to cloud storage providers.
I referenced these while making a seminar presentation about options for encrypting databases. I also saw that you read the papers first, so I won't expect quick turn around (and if these don't fit the level of abstraction you envision for this repository). Other candidates:
- Database Encryption: An Overview of Contemporary Challenges and Design Considerations (2010) Provides a nice survey of the subfield. Identifies the attacks possible, proposals of encryption at various levels, and the consequences common to all databases using encryption. It also has a nice bibliography.
- Encryption-based multilevel model for DBMS (2012) Sallam, et al, describe a dbms with encryption baked in such that the system manages a key per cell in the database. That limits it to use on trusted hardware. Behind an Elsevier paywall (though I read it, subsidized, at the time).
- And lots of papers from the encryption side about utilites optimized for peticular queries or encryption schemes. One used by CryptDB (for strings) is Dawn Song, et al,'s Practical Techniques for Searches on Encrypted Data substring searchable encryption algorithm.