12516

11453

كارشناسي ارشد

مخابرات

اصفهان: دانشگاه صنعتي اصفهان، دانشكده برق وكامپيوتر

1396

ده، 70ص.: مصور، جدول، نمودار

ص. ع. به فارسي و انگليسي

مهدي برنج كوب

علي فانيان

مسعود عمومي، محمد دخيل عليان

1396/04/18

كتابنامه

برق وكامپيوتر

مهندسي برق و كامپيوتر

ID11453

Database Outsourcing with Resistance against Inference Attacks in Cloud Computing Farzad Zamani farzad zamani@ec iut ac ir Department of Electrical and Computer Engineering Isfahan University of Technology Isfahan 84156 83111 Iran Degree M Sc Language Farsi Supervisor Dr Mehdi Berenjkoub brnjkb@cc iut ac ir AbstractWith the advent of Cloud Computing technology data and computation outsourcing to cloud providers has become a growingtendency among companies and organizations Nevertheless the most important barrier in outsourcing is preserving thesecurity and confidentiality of data against possible abuse by cloud providers One of the main scenarios in utilization ofcloud based services is database outsourcing In the topic of secure database outsourcing confidentiality of user datais preserved by means of cryptographic techniques Since performing queries on a database is contradictory with beingstrongly encrypted encryption alone is not sufficient Therefore the main challenge in secure outsourcing of database is tohave confidentiality and query support simultaneously Many solutions have been proposed by the researchers of appliedcryptography According to literature the most studied solution is using weak encryptions such as deterministic encryptionand order preserving encryption Nevertheless none of the previous solutions have reached an acceptable level of security Most of the earlier proposed frameworks are vulnerable to inference attacks like frequency analysis In inference attacks the cloud provider tries to break the confidentiality of system by taking advantage of some statistical information derivedfrom the encrypted database or queries In this thesis we propose a framework for secure database outsourcing to resist suchattacks We have used bitmap indices that are secret shared among two clouds For query processing each cloud obtainsa share of the query result using methods in Secure Multi Party Computation SMPC and sends its share to a third cloud which holds the encrypted database Therefore none of the clouds can get any information about the user data or frequencyand order of values in the database We assume that these three clouds do not collude with each other Keywords Secure Database Outsourcing Bitmap Index Secret Sharing Secure Multi Party Computation Cryptography Cloud Computing

مهدي برنج كوب

علي فانيان

مسعود عمومي، محمد دخيل عليان