Secret sharing for cloud data security: a survey

Attasena, Varunya; Darmont, Jérôme; Harbi, Nouria

doi:10.1007/s00778-017-0470-9

Cited by 54 publications

(25 citation statements)

References 98 publications

(391 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, this approach does not target security as an objective but has the objective to maximize the profit for providers. Other related work on using secret sharing for secure cloud storage, as for example, surveyed in Attasena et al (2017), has not addressed the usable configuration management problem yet.…”

Section: Related Workmentioning

confidence: 99%

Making secret sharing based cloud storage usable

Framner

Fischer‐Hübner

Lorünser

et al. 2019

ICS

View full text Add to dashboard Cite

Purpose The purpose of this paper is to develop a usable configuration management for Archistar, which utilizes secret sharing for redundantly storing data over multiple independent storage clouds in a secure and privacy-friendly manner. Selecting the optimal secret sharing parameters, cloud storage servers and other settings for securely storing the secret data shares, while meeting all of end user’s requirements and other restrictions, is a complex task. In particular, complex trade-offs between different protection goals and legal privacy requirements need to be made. Design/methodology/approach A human-centered design approach with structured interviews and cognitive walkthroughs of user interface mockups with system administrators and other technically skilled users was used. Findings Even technically skilled users have difficulties to adequately select secret sharing parameters and other configuration settings for adequately securing the data to be outsourced. Practical implications Through these automatic settings, not only system administrators but also non-technical users will be able to easily derive suitable configurations. Originality/value The authors present novel human computer interaction (HCI) guidelines for a usable configuration management, which propose to automatically set configuration parameters and to solve trade-offs based on the type of data to be stored in the cloud. Through these automatic settings, not only system administrators but also non-technical users will be able to easily derive suitable configurations.

show abstract

Section: Related Workmentioning

confidence: 99%

Making secret sharing based cloud storage usable

Framner

Fischer‐Hübner

Lorünser

et al. 2019

ICS

View full text Add to dashboard Cite

show abstract

“…If there are malicious participants in the system, the sharing secret may not be reconstructed correctly, and the malicious participants cannot be identified. To solve this problem, some verifiable secret sharing schemes have been proposed by different researchers [27]. In addition to key escrow, secret sharing schemes can also be used for group session key sharing and cloud data sharing or computing [27]- [29].…”

Section: ) Secret Sharing Schemementioning

confidence: 99%

Key Escrow Protocol Based on a Tripartite Authenticated Key Agreement and Threshold Cryptography

Wang

et al. 2019

IEEE Access

View full text Add to dashboard Cite

While instant messaging systems bring convenience to people's lives and work, they also make it easier for malicious users to discuss and plot illegal activities. Therefore, determining how to balance the privacy protection requirements of user communication in the network with the authorized monitoring requirements of law enforcement agencies (LEAs) is a meaningful task. To solve this problem, a new tripartite authenticated key agreement (Tri-AKA) protocol and a session key escrow scheme based on threshold cryptography and the new Tri-AKA protocol were proposed. In the proposed scheme, the LEA participates as a normal user in the key agreement process of two users and uses (t, n) threshold cryptography to share its ephemeral private key with n key escrow agents (KEAs). When necessary, the LEA can combine t KEAs to recover the specified session key and decrypt the communications, thereby preventing malicious administrators in the LEA from arbitrarily monitoring user communications. Finally, we proved the security of the proposed Tri-AKA protocol under the Computational Diffie-Hellman (CDH) assumption with the Random Oracle Model and the security of the proposed key escrow scheme under the Elliptic Curve Discrete Logarithm (ECDL) assumption. Analysis of our session key escrow scheme and comparison with other schemes show that our scheme can avoid the ''once monitor, monitor forever'' scenario and achieve finegrained control in each session. Moreover, our scheme has low storage overhead for each KEA.

show abstract

“…It addresses the trust issue between three parties (CSP, investigators, victim) by an authentication mechanism for each party to unlock one of the three‐part keys used in the SSS key sharing mechanism, which can be collaborated to find the ECC private (decryption) key. This method is used to decrypt and display the logs in a read‐only manner …”

Section: Proposed Schemementioning

confidence: 99%

Secure logging scheme for forensic analysis in cloud

Sree

Bhanu

2019

Concurrency and Computation

View full text Add to dashboard Cite

Summary Cloud computing has emerged as a prominent technology that provides reliable on‐demand cloud services to users. Among the various kind of attacks, Distributed Denial of Service (DDoS) attack is one of the major application layer attacks that target the resources and services running in the cloud. Due to the distributed nature of attacks or crimes in the cloud, the evidence are collected from various components such as the router, switches, hard disk, log traces, and virtual machines. An attacker may collude with the cloud provider or investigators to tamper the log files or by inserting false information or by deleting the malicious activity logs altogether by leaving no trace. Hence, security is the major concern in cloud wherein investigation of crimes and attacks are very difficult. Collecting logs from the cloud providers is very hard since many users share the same network resources and the investigators rely on the providers to access the information. Therefore, in order to preserve the confidentiality, integrity, and authentication of logs, secure logging scheme is proposed to preserve the logs for forensic investigation. This paper highlights the secure logging scheme by extracting the features from logs of all virtual machine instances by double encryption scheme and also deals the integrity of the logs using hashing and verifies the signatures using Bloom filter–based R tree (BR tree). Furthermore, the verification is performed using Shamir Secret Sharing (SSS) scheme, and it is responsible for sharing the secret (private) keys to all the three parties, ie, user, investigator, and cloud providers. It is inferred from the experimental results that the proposed scheme requires minimal log processing time, minimal verification time for inserting logs, stores logs in time, and space efficient manner and scalable than existing methods.

show abstract

Secret sharing for cloud data security: a survey

Cited by 54 publications

References 98 publications

Making secret sharing based cloud storage usable

Making secret sharing based cloud storage usable

Key Escrow Protocol Based on a Tripartite Authenticated Key Agreement and Threshold Cryptography

Secure logging scheme for forensic analysis in cloud

Contact Info

Product

Resources

About