Secure Untrusted Data Repository (SUNDR)

Li, Jinyuan; Krohn, Maxwell; Mazières, David; Shasha, Dennis

doi:10.21236/ada445862

Cited by 199 publications

(220 citation statements)

References 28 publications

Supporting

Mentioning

220

Contrasting

Order By: Relevance

“…We discuss the implications of providing integrity guarantees, focusing on freshness (reads reflect the most recent write), which is impossible to do with untrusted software alone [4].…”

Section: Example: Secure Cloud Storagementioning

confidence: 99%

Security challenges and opportunities in adaptive and reconfigurable hardware

Costan

Devadas

2011

2011 IEEE International Symposium on Hardware-Oriented Security and Trust

View full text Add to dashboard Cite

Abstract-We present a novel approach to building hardware support for providing strong security guarantees for computations running in the cloud (shared hardware in massive data centers), while maintaining the high performance and low cost that make cloud computing attractive in the first place. We propose augmenting regular cloud servers with a Trusted Computation Base (TCB) that can securely perform high-performance computations. Our TCB achieves cost savings by spreading functionality across two paired chips. We show that making a Field-Programmable Gate Array (FPGA) a part of the TCB benefits security and performance, and we explore a new method for defending the computation inside the TCB against sidechannel attacks.

show abstract

“…We discuss the implications of providing integrity guarantees, focusing on freshness (reads reflect the most recent write), which is impossible to do with untrusted software alone [4].…”

Section: Example: Secure Cloud Storagementioning

confidence: 99%

Security challenges and opportunities in adaptive and reconfigurable hardware

Costan

Devadas

2011

2011 IEEE International Symposium on Hardware-Oriented Security and Trust

View full text Add to dashboard Cite

show abstract

“…Fork-linearizability has been introduced (under the name of fork consistency) together with the SUNDR storage system [22,17]. Conceptually SUNDR operates on storage objects with simple read/write semantics.…”

Section: Related Workmentioning

confidence: 99%

Verifying the Consistency of Remote Untrusted Services with Commutative Operations

Cachin

Ohrimenko

2014

Lecture Notes in Computer Science

View full text Add to dashboard Cite

A group of mutually trusting clients outsources a computation service to a remote server, which they do not fully trust and that may be subject to attacks. The clients do not communicate with each other and would like to verify the correctness of the remote computation and the consistency of the server's responses. This paper presents the Conflict-free Operation verification Protocol (COP) that ensures linearizability when the server is correct and preserves fork-linearizability in any other case. All clients that observe each other's operations are consistent, in the sense that their own operations and those operations of other clients that they see are linearizable. If the server forks two clients by hiding an operation, these clients never again see operations of each other. COP supports wait-free client operations in the sense that when executed with a correct server, non-conflicting operations can run without waiting for other clients, allowing more parallelism than earlier protocols. A conflict arises when an operation causes a subsequent operation to produce a different output value for the client who runs it. The paper gives a precise model for the guarantees of COP and includes a formal analysis that these are achieved.

show abstract

“…We do not detail the several papers and products in this field (e.g., [6,10,11]) because they do not allow any computation on encrypted data. Hence they cannot be applied to the context of cloud DBaaS.…”

Section: Related Workmentioning

confidence: 99%

Supporting Security and Consistency for Cloud Database

Ferretti

Colajanni

Marchetti

2012

Cyberspace Safety and Security

View full text Add to dashboard Cite

Abstract. Typical Cloud database services guarantee high availability and scalability, but they rise many concerns about data confidentiality. Combining encryption with SQL operations is a promising approach although it is characterized by many open issues. Existing proposals, which are based on some trusted intermediate server, limit availability and scalability of original cloud database services. We propose an alternative architecture that avoids any intermediary component, thus achieving availability and scalability comparable to that of unencrypted cloud database services. Moreover, our proposal guarantees data consistency in scenarios in which independent clients concurrently execute SQL queries, and the structure of the database can be modified.

show abstract

Secure Untrusted Data Repository (SUNDR)

Cited by 199 publications

References 28 publications

Security challenges and opportunities in adaptive and reconfigurable hardware

Security challenges and opportunities in adaptive and reconfigurable hardware

Verifying the Consistency of Remote Untrusted Services with Commutative Operations

Supporting Security and Consistency for Cloud Database

Contact Info

Product

Resources

About