维普中文期刊产品整合服务

Threat Model and Defense Scheme for Side-Channel Attacks in Client-Side Deduplication

查看全文 作  者:Guanxiong [1,2]Ha;Hang [1,2]Chen;Chunfu [1,2]Jia;Mingyue [1,2]Li 高影响力作者 机构地区:[1]College of Cyber Science,Nankai University,Tianjin 300350,China;[2]Tianjin Key Laboratory of Network and Data Security Technology,Tianjin 300350,China高影响力机构 出  处:《Tsinghua Science and Technology》索引2023年第28卷第1期,共12页高影响力期刊 基  金:supported by the National Key R&D Program of China (No.2018YFA0704703);National Natural Science Foundation of China (Nos.61972215,61972073,and 62172238);Natural Science Foundation of Tianjin (No.20JCZDJC00640). 摘  要:In cloud storage,client-side deduplication is widely used to reduce storage and communication costs.In client-side deduplication,if the cloud server detects that the user’s outsourced data have been stored,then clients will not need to reupload the data.However,the information on whether data need to be uploaded can be used as a side-channel,which can consequently be exploited by adversaries to compromise data privacy.In this paper,we propose a new threat model against side-channel attacks.Different from existing schemes,the adversary could learn the approximate ratio of stored chunks to unstored chunks in outsourced files,and this ratio will affect the probability that the adversary compromises the data privacy through side-channel attacks.Under this threat model,we design two defense schemes to minimize privacy leakage,both of which design interaction protocols between clients and the server during deduplication checks to reduce the probability that the adversary compromises data privacy.We analyze the security of our schemes,and evaluate their performances based on a real-world dataset.Compared with existing schemes,our schemes can better mitigate data privacy leakage and have a slightly lower communication cost. 关 键 词:cloud storage DEDUPLICATION side-channel PRIVACY
相关文献

参考文献(22)

引证文献(2)

网站首页 | 关于我们 | 联系我们 | 产品服务 | 客服中心 | 广告服务 | 版权声明 | 网站联盟 | 友情链接 | 售卡网点

版权所有© 渝B2-20050021-1 渝公网安备 50019002500403号 违法和不良信息举报中心

互联网出版许可证 新出网证(渝)字10号 全国400电话 - 免长途话费