Trusting the cloud

ABSTRACT

More and more users store data in "clouds" that are accessed remotely over the Internet. We survey well-known cryptographic tools for providing integrity and consistency for data stored in clouds and discuss recent research in cryptography and distributed computing addressing these problems.

REFERENCES

• 1: I. Abraham, G. Chockler, I. Keidar, and D. Malkhi. Byzantine disk Paxos: Optimal resilience with Byzantine shared memory. Distributed Computing, 18(5):387--408, 2006.
• 2: Giuseppe Ateniese , Randal Burns , Reza Curtmola , Joseph Herring , Lea Kissner , Zachary Peterson , Dawn Song, Provable data possession at untrusted stores, Proceedings of the 14th ACM conference on Computer and communications security, October 28-31, 2007, Alexandria, Virginia, USA [doi>10.1145/1315245.1315318]
• 3: Ken Birman , Gregory Chockler , Robbert van Renesse, Toward a cloud computing research agenda, ACM SIGACT News, v.40 n.2, June 2009 [doi>10.1145/1556154.1556172]
• 4: M. Blum, W. Evans, P. Gemmell, S. Kannan, and M. Naor. Checking the correctness of memories. Algorithmica, 12:225--244, 1994.
• 5: K. D. Bowers, A. Juels, and A. Oprea. Hail: A high-availability and integrity layer for cloud storage. Cryptology ePrint Archive, Report 2008/489, 2008. http://eprint.iacr.org/.
• 6: K. D. Bowers, A. Juels, and A. Oprea. Proofs of retrievability: Theory and implementation. Cryptology ePrint Archive, Report 2008/175, 2008. http://eprint.iacr.org/.
• 7: C. Cachin, I. Keidar, and A. Shraer. Fail-aware untrusted storage. In Proc. DSN 2009, to appear. Full paper available as Tech. Report CCIT 712, Department of Electrical Engineering, Technion, Dec. 2008.
• 8: Christian Cachin , Idit Keidar , Alexander Shraer, Fork sequential consistency is blocking, Information Processing Letters, v.109 n.7, p.360-364, March, 2009 [doi>10.1016/j.ipl.2008.12.004]
• 9: Christian Cachin , Abhi Shelat , Alexander Shraer, Efficient fork-linearizable access to untrusted shared memory, Proceedings of the twenty-sixth annual ACM symposium on Principles of distributed computing, August 12-15, 2007, Portland, Oregon, USA [doi>10.1145/1281100.1281121]
• 10: Miguel Castro , Barbara Liskov, Practical Byzantine fault tolerance, Proceedings of the third symposium on Operating systems design and implementation, p.173-186, February 1999, New Orleans, Louisiana, United States
• 11: Byung-Gon Chun , Petros Maniatis , Scott Shenker , John Kubiatowicz, Attested append-only memory: making adversaries stick to their word, Proceedings of twenty-first ACM SIGOPS symposium on Operating systems principles, October 14-17, 2007, Stevenson, Washington, USA
• 12: Christof Fetzer , Flaviu Cristian, Fail-awareness in timed asynchronous systems, Proceedings of the fifteenth annual ACM symposium on Principles of distributed computing, p.314-321, May 23-26, 1996, Philadelphia, Pennsylvania, United States [doi>10.1145/248052.248119]
• 13: E.-J. Goh, H. Shacham, N. Modadugu, and D. Boneh. Sirius: Securing remote untrusted storage. In Proc. NDSS, 2003.
• 14: James Hendricks , Gregory R. Ganger , Michael K. Reiter, Low-overhead byzantine fault-tolerant storage, Proceedings of twenty-first ACM SIGOPS symposium on Operating systems principles, October 14-17, 2007, Stevenson, Washington, USA
• 15: M. Herlihy. Wait-free synchronization. ACM TOPLAS, 11(1), 1991.
• 16: Maurice P. Herlihy , Jeannette M. Wing, Linearizability: a correctness condition for concurrent objects, ACM Transactions on Programming Languages and Systems (TOPLAS), v.12 n.3, p.463-492, July 1990 [doi>10.1145/78969.78972]
• 17: P. W. Hutto and M. Ahamad. Slow memory: Weakening consistency to enchance concurrency in distributed shared memories. In Proc. ICDCS, 1990.
• 18: Ari Juels , Burton S. Kaliski, Jr., Pors: proofs of retrievability for large files, Proceedings of the 14th ACM conference on Computer and communications security, October 28-31, 2007, Alexandria, Virginia, USA [doi>10.1145/1315245.1315317]
• 19: L. Lamport, How to Make a Multiprocessor Computer That Correctly Executes Multiprocess Progranm, IEEE Transactions on Computers, v.28 n.9, p.690-691, September 1979 [doi>10.1109/TC.1979.1675439]
• 20: Jinyuan Li , Maxwell Krohn , David Mazières , Dennis Shasha, Secure untrusted data repository (SUNDR), Proceedings of the 6th conference on Symposium on Opearting Systems Design & Implementation, p.9-9, December 06-08, 2004, San Francisco, CA
• 21: J. Li and D. Mazières. Beyond one-third faulty replicas in Byzantine fault tolerant systems. In Proc. NSDI, 2007.
• 22: Umesh Maheshwari , Radek Vingralek , William Shapiro, How to build a trusted database system on untrusted storage, Proceedings of the 4th conference on Symposium on Operating System Design & Implementation, p.10-10, October 22-25, 2000, San Diego, California
• 23: Dahlia Malkhi , Michael Reiter, Byzantine quorum systems, Distributed Computing, v.11 n.4, p.203-213, October 1998 [doi>10.1007/s004460050050]
• 24: David Mazières , Dennis Shasha, Building secure file systems out of byzantine storage, Proceedings of the twenty-first annual symposium on Principles of distributed computing, July 21-24, 2002, Monterey, California [doi>10.1145/571825.571840]
• 25: R. C. Merkle. Protocols for public key cryptosystems. In IEEE Symposium on Security and Privacy, pages 122--134, 1980.
• 26: Einar Mykletun , Maithili Narasimha , Gene Tsudik, Authentication and integrity in outsourced databases, ACM Transactions on Storage (TOS), v.2 n.2, p.107-138, May 2006 [doi>10.1145/1149976.1149977]
• 27: A. Oprea and M. K. Reiter. On consistency of encrypted files. In Proc. DISC, 2006.
• 28: Charalampos Papamanthou , Roberto Tamassia , Nikos Triandopoulos, Authenticated hash tables, Proceedings of the 15th ACM conference on Computer and communications security, October 27-31, 2008, Alexandria, Virginia, USA [doi>10.1145/1455770.1455826]
• 29: Hovav Shacham , Brent Waters, Compact Proofs of Retrievability, Proceedings of the 14th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology, December 07-11, 2008, Melbourne, Australia [doi>10.1007/978-3-540-89255-7_7]
• 30: D. B. Terry , M. M. Theimer , Karin Petersen , A. J. Demers , M. J. Spreitzer , C. H. Hauser, Managing update conflicts in Bayou, a weakly connected replicated storage system, Proceedings of the fifteenth ACM symposium on Operating systems principles, p.172-182, December 03-06, 1995, Copper Mountain, Colorado, United States
• 31: Aydan R. Yumerefendi , Jeffrey S. Chase, Strong accountability for network storage, ACM Transactions on Storage (TOS), v.3 n.3, p.11-es, October 2007 [doi>10.1145/1288783.1288786]

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

Additional Classification:
  A. General Literature
  A.1 INTRODUCTORY AND SURVEY

  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection

  E. Data
  E.3 DATA ENCRYPTION

  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.7 Database Administration
          Subjects: Security, integrity, and protection

General Terms:
Algorithms, Design, Management, Security, Theory