Data Security in Cloud Storage (Wireless Networks)

This book provides a comprehensive overview of data security in cloud storage, ranging from basic paradigms and principles, to typical security issues and practical security solutions. It also illustrates how malicious attackers benefit from the compromised security of outsourced data in cloud storage and how attacks work in real situations, together with the countermeasures used to ensure the security of outsourced data. Furthermore, the book introduces a number of emerging technologies that hold considerable potential - for example, blockchain, trusted execution environment, and indistinguishability obfuscation - and outlines open issues and future research directions in cloud storage security. The topics addressed are important for the academic community, but are also crucial for industry, since cloud storage has become a fundamental component in many applications. The book offers a general introduction for interested readers with a basic modern cryptography background, and a reference guide for researchers and practitioners in the fields of data security and cloud storage. It will also help developers and engineers understand why some current systems are insecure and inefficient, and move them to design and develop improved systems. -- Provided by publisher Preface 6 Contents 8 Acronyms 11 1 Introduction 13 1.1 An Overview of Cloud Storage 14 1.1.1 Cloud Storage Architecture 14 1.1.2 Cloud Storage Applications 15 1.1.2.1 Electronic Healthcare 15 1.1.2.2 Data Sharing 16 1.1.2.3 IoT 16 1.2 Data Security in Cloud Storage 17 1.3 Organization of the Monograph 19 References 21 2 Basic Techniques for Data Security 23 2.1 Data Authentication 23 2.1.1 Message Authentication Code 24 2.1.2 Hash Function 25 2.1.3 Digital Signature 26 2.2 Data Confidentiality 28 2.2.1 Symmetric-Key Encryption 28 2.2.2 Public-Key Encryption 29 2.3 Threshold Cryptography 30 2.4 Public-Key Cryptosystems 30 2.4.1 PKI-Based Public-Key Cryptosystems 31 2.4.2 Identity-Based Public-Key Cryptosystems 31 2.4.3 Certificateless Public-Key Cryptosystems 32 2.5 Blockchain 32 2.6 Trusted Execution Environments 36 2.7 Summary and Further Reading 37 References 37 3 Cloud Storage Reliability 40 3.1 Data Integrity 40 3.2 Proofs of Storage: Definition and Criteria 41 3.2.1 Threat Models 42 3.2.2 Security Criteria 44 3.3 Proofs of Storage for Cloud Storage Systems 45 3.3.1 Proofs of Storage for Dynamic Data 49 3.3.1.1 PDP-Based Integrity Verification of Dynamic Data 49 3.3.1.2 PoR-Based Integrity Verification of Dynamic Data 50 3.3.2 Enhancement of Security 51 3.3.2.1 Privacy-Preserving Public Verification 51 3.3.2.2 Resistance Against External Adversaries 52 3.3.3 Constructing Public Verification on Different Cryptosystems 53 3.3.4 Other Works 54 3.4 Latest Advances in Proofs of Storage 55 3.4.1 Proofs of Storage Based on Indistinguishability Obfuscation 55 3.4.2 Proofs of Storage Based on Blockchain 58 3.4.2.1 On the Vulnerability of Existing Public Verification Schemes Against Dishonest Auditors 58 3.4.2.2 Blockchain-Based Public Verification Against Dishonest Auditors 59 3.5 Summary and Further Reading 62 References 63 4 Secure Deduplication 66 4.1 Deduplication Classification 66 4.2 Secure Deduplication: Threats and Countermeasures 68 4.2.1 Proofs of Ownership 69 4.2.2 Randomized Deduplication 71 4.3 Message-Locked Encryption 71 4.3.1 Overview 72 4.3.2 Threat Models of Encrypted Deduplication Storage Systems 75 4.3.3 Security Definition 76 4.4 Encrypted Deduplication Systems 76 4.4.1 Enhancement of Security 77 4.4.2 Practical Concern 84 4.4.3 Other Works 87 4.5 When Secure Deduplication Meets eHealth: A Case Study 87 4.5.1 Cloud-Based eHealth Systems 88 4.5.2 Adversary Model and Security Goals 89 4.5.3 Analysis of EMRs in Actual eHealth Systems 90 4.5.4 Study of HealthDep 92 4.6 Summary and Further Reading 95 References 95 5 Secure Keyword Search 98 5.1 Keyword Search Over Encrypted Data 98 5.2 Symmetric-Key Searchable Encryption 100 5.2.1 System and Threat Models 100 5.2.2 Survey on Symmetric-Key Searchable Encryption 100 5.2.2.1 Basic SSE and Its Development 101 5.2.2.2 SSE for Dynamic Data 104 5.2.2.3 Variants of SSE 107 5.2.2.4 Other Works 108 5.3 Public-Key Searchable Encryption 109 5.3.1 System model 110 5.3.2 Threat Model and Security Definition 111 5.3.3 Survey on Public-Key Searchable Encryption 111 5.3.3.1 Vulnerability of PSE Against Keyword Guessing Attacks and Countermeasures 112 5.3.3.2 Constructing PSE on Different Cryptosystems 114 5.3.3.3 Essential Relationships Between PSE and Other Cryptographic Primitives 114 5.4 Latest Advances in Public-Key Searchable Encryption 115 5.4.1 Public-Key Searchable Encryption Against Keyword Guessing Attacks 115 5.4.1.1 System Model 116 5.4.1.2 Threat Model 117 5.4.1.3 Introduction to SEPSE 118 5.4.2 Remark and Further Discussion 123 5.5 Summary and Further Reading 124 References 125 6 Secure Data Provenance 129 6.1 Introduction to Secure Data Provenance 129 6.1.1 Data Provenance vs. Secure Data Provenance 130 6.1.2 System and Threat Models 133 6.2 Survey on Secure Data Provenance 135 6.3 Blockchain: A Panacea for Secure Data Provenance 137 6.3.1 Blockchain-Based Secure Data Provenance 138 6.3.1.1 A Model of Data Provenance 138 6.3.1.2 System and Threat Models 140 6.3.1.3 Overview of ESP 141 6.3.1.4 Construction of ESP 142 6.3.2 Implementation Based on Ethereum 145 6.3.3 Data Provenance and Beyond: Further Discussion 147 6.4 Summary and Further Reading 149 References 150 7 Secure Data Time-Stamping 152 7.1 Introduction to Secure Data Time-Stamping 152 7.1.1 What Kinds of Data Would Benefit from Secure Time-Stamping? 153 7.1.2 System and Threat Models 154 7.2 Survey on Secure Time-Stamping 155 7.3 Secure Time-Stamping and Blockchain 158 7.3.1 Distributed Cryptocurrencies from Secure Time-Stamping 159 7.3.2 Secure Time-Stamping from Blockchain 160 7.3.2.1 Overview of Chronos+ 160 7.3.2.2 Construction of Chronos+ 164 7.3.2.3 Accuracy of Height-Derived Timestamps 168 7.3.2.4 Simulation on Ethereum 169 7.4 Summary and Further Reading 173 References 173 8 Summary and Future Research Directions 176 8.1 Summary 176 8.2 Future Work 178 8.2.1 Secure Data Integrity Verification from Smart Contract 178 8.2.2 Combination of Encrypted Deduplication and Symmetric-key Searchable Encryption 179 8.2.3 Secure Provenance Under Complex Models 180 8.2.4 Securely Time-stamping Operations in the Digital World 180