SecureStreams

Havet, Aurélien; Pires, Rafael; Felber, Pascal; Pasin, Marcelo; Rouvoy, Romain; Schiavoni, Valerio

doi:10.1145/3093742.3093927

Cited by 15 publications

(2 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Since these data streams may convey sensitive information, stream processing requires support for end-to-end security guarantees in order to prevent third parties from accessing restricted data. We present Se-cureStreams [14], a middleware framework for developing and deploying secure stream processing on untrusted distributed environments.…”

Section: Securestreamsmentioning

confidence: 99%

See 1 more Smart Citation

Distributed systems and trusted execution environments : trade-offs and challenges

Pires¹

View full text Add to dashboard Cite

Security and privacy concerns in computer systems have grown in importance with the ubiquity of connected devices. Additionally, cloud computing boosts such distress as private data is stored and processed in multi-tenant infrastructure providers. In recent years, trusted execution environments (TEEs) have caught the attention of scientific and industry communities as they became largely available in user-and server-class machines. TEEs provide security guarantees based on cryptographic constructs built in hardware. Since silicon chips are difficult to probe or reverse engineer, they can offer stronger protection against remote or even physical attacks when compared to their software counterparts. Intel software guard extensions (SGX), in particular, implements powerful mechanisms that can shield sensitive data even from privileged users with full control of system software. Designing secure distributed systems is a notably daunting task, since they involve many coordinated processes running in geographically-distant nodes, therefore having numerous points of attack. In this work, we essentially explore some of these challenges by using Intel SGX as a crucial tool. We do so by designing and experimentally evaluating several elementary systems ranging from communication and processing middleware to a peer-to-peer privacy-preserving solution. We start with support systems that naturally fit cloud deployment scenarios, namely content-based routing, batching and stream processing frameworks. Our communication middleware protects the most critical stage of matching subscriptions against publications inside secure enclaves and achieves substantial performance gains in comparison to traditional software-based equivalents. The processing platforms, in turn, receive encrypted data and code to be executed within the trusted environment. Our prototypes are then used to analyse the manifested memory usage issues intrinsic to SGX. Next, we aim at protecting very sensitive data: cryptographic keys. By leveraging TEEs, we design protocols for group data sharing that have lower computational complexity than legacy methods. As a bonus, our proposals allow large savings on metadata volume and processing time of cryptographic operations, all with equivalent security guarantees. Finally, we focus our attention on privacy-preserving systems. After all, users cannot modify some existing systems like web-search engines, and the providers of these services may keep individual profiles containing sensitive private information about them. We aim at achieving indistinguishability and unlinkability properties by employing techniques like sensitivity analysis, query obfuscation and leveraging relay nodes. Our evaluation shows that we propose the most robust system in comparison to existing solutions with regard to user re-identification rates and results' accuracy in a scalable way. All in all, this thesis proposes new mechanisms that take advantage of TEEs for distributed system architectures. We show through an empirical approach on top of...

show abstract

Section: Securestreamsmentioning

confidence: 99%

“…Just like SCBR, messages are not integrity-and replay-protected. The source code of both Lightweight MapReduce and SecureStreams is publicly available [13,15].…”

Section: The Road Aheadmentioning

confidence: 99%

Distributed systems and trusted execution environments : trade-offs and challenges

Pires¹

View full text Add to dashboard Cite

show abstract

The state‐of‐the‐art in container technologies: Application, orchestration and security

Casalicchio

Iannucci

2020

Concurrency and Computation

View full text Add to dashboard Cite

SummaryContainerization is a lightweight virtualization technology enabling the deployment and execution of distributed applications on cloud, edge/fog, and Internet‐of‐Things platforms. Container technologies are evolving at the speed of light, and there are many open research challenges. In this paper, an extensive literature review is presented that identifies the challenges related to the adoption of container technologies in High Performance Computing, Big Data analytics, and geo‐distributed (Edge, Fog, Internet‐of‐Things) applications. From our study, it emerges that performance, orchestration, and cyber‐security are the main issues. For each challenge, the state‐of‐the‐art solutions are then analyzed. Performance is related to the assessment of the performance footprint of containers and comparison with the footprint of virtual machines and bare metal deployments, the monitoring, the performance prediction, the I/O throughput improvement. Orchestration is related to the selection, the deployment, and the dynamic control of the configuration of multi‐container packaged applications on distributed platforms. The focus of this work is on run‐time adaptation. Cyber‐security is about container isolation, confidentiality of containerized data, and network security. From the analysis of 97 papers, it came out that the state‐of‐the‐art is more mature in the area of performance evaluation and run‐time adaptation rather than in security solutions. However, the main unsolved challenges are I/O throughput optimization, performance prediction, multilayer monitoring, isolation, and data confidentiality (at rest and in transit).

show abstract

Towards a Security-Aware Deployment of Data Streaming Applications in Fog Computing

Russo

Cardellini

Presti

et al. 2021

Advances in Information Security

View full text Add to dashboard Cite

SecureStreams

Cited by 15 publications

References 23 publications

Distributed systems and trusted execution environments : trade-offs and challenges

Distributed systems and trusted execution environments : trade-offs and challenges

The state‐of‐the‐art in container technologies: Application, orchestration and security

Towards a Security-Aware Deployment of Data Streaming Applications in Fog Computing

Contact Info

Product

Resources

About