db-readings icon indicating copy to clipboard operation
db-readings copied to clipboard

Two encrypted database systems

Open Nzen opened this issue 10 years ago • 1 comments

Put two styles of encrypted databases in Trends: CryptDB that peels layers of encryption to keep the data secure while queriable; and, Cipherbase, which offloads decryption & sensitive queries to trusted hardware. These can be significant as we export more of our data to cloud storage providers.

Nzen avatar Aug 31 '14 05:08 Nzen

I referenced these while making a seminar presentation about options for encrypting databases. I also saw that you read the papers first, so I won't expect quick turn around (and if these don't fit the level of abstraction you envision for this repository). Other candidates:

  • Database Encryption: An Overview of Contemporary Challenges and Design Considerations (2010) Provides a nice survey of the subfield. Identifies the attacks possible, proposals of encryption at various levels, and the consequences common to all databases using encryption. It also has a nice bibliography.
  • Encryption-based multilevel model for DBMS (2012) Sallam, et al, describe a dbms with encryption baked in such that the system manages a key per cell in the database. That limits it to use on trusted hardware. Behind an Elsevier paywall (though I read it, subsidized, at the time).
  • And lots of papers from the encryption side about utilites optimized for peticular queries or encryption schemes. One used by CryptDB (for strings) is Dawn Song, et al,'s Practical Techniques for Searches on Encrypted Data substring searchable encryption algorithm.

Nzen avatar Aug 31 '14 06:08 Nzen