NDLI: Streamforce: outsourcing access control enforcement for stream data to the clouds

Please wait, while we are loading the content...

On the suitability of dissemination-centric access control systems for group-centric sharing

KameleonFuzz: evolutionary fuzzing for black-box XSS detection

Virtualization and security: happily ever after?

On protection in federated social computing systems

Measuring the robustness of source program obfuscation: studying the impact of compiler optimizations on the obfuscation of C programs

Systematic audit of third-party android phones

On quantitative dynamic data flow tracking

Shared responsibility is better than no responsibility: federated encryption in the cloud

Efficient privacy-aware search over encrypted databases

TrustID: trustworthy identities for untrusted mobile devices

An efficient privacy-preserving system for monitoring mobile users: making searchable encryption practical

Streamforce: outsourcing access control enforcement for stream data to the clouds

Automated black-box detection of access control vulnerabilities in web applications

COMPARS: toward an empirical approach for comparing the resilience of reputation systems

Interaction provenance model for unified authentication factors in service oriented computing

PREC: practical root exploit containment for android devices

Security of graph data: hashing schemes and definitions

DroidBarrier: know what is executing on your android

Keystroke biometrics: the user perspective

Is it really you?: user identification via adaptive behavior fingerprinting

Compac: enforce component-level access control in android

PhishSafe: leveraging modern JavaScript API's for transparent and robust protection

RiskMon: continuous and automated risk assessment of mobile applications

Detecting man-in-the-middle attacks on non-mobile systems

DIVILAR: diversifying intermediate language for anti-repackaging on android platform

Inference attack against encrypted range queries on outsourced databases

RopSteg: program steganography with return oriented programming

Relationship-based information sharing in cloud-based decentralized social networks

Wiretap-proof: what they hear is not what you speak, and what you speak they do not hear

Situational awareness through reasoning on network incidents

A modular multi-location anonymized traffic monitoring tool for a WiFi network

SobTrA: a software-based trust anchor for ARM cortex application processors

WebWinnow: leveraging exploit kit workflows to detect malicious urls

Consistency checking in access control

Privacy-preserving audit for broker-based health information exchange

POSTER: a pairing-free certificateless hybrid sign-cryption scheme for advanced metering infrastructures

Spoilt for choice: graph-based assessment of key management protocols to share encrypted data

Trust ranking of medical websites

A cloud architecture for protecting guest's information from malicious operators with memory management

Privacy-preserving publication of provenance workflows

Large-scale machine learning-based malware detection: confronting the "10-fold cross validation" scheme with reality

Securing OAuth implementations in smart phones

Minimizing lifetime of sensitive data in concurrent programs

Streamforce: outsourcing access control enforcement for stream data to the clouds

Content Provider	ACM Digital Library
Author	Datta, Anwitaman Anh, Dinh Tien Tuan
Abstract	In this paper, we focus on the problem of data privacy on the cloud, particularly on access controls over stream data. The nature of stream data and the complexity of sharing data make access control a more challenging issue than in traditional archival databases. We present Streamforce -- a system allowing data owners to securely outsource their data to an untrusted (curious-but-honest) cloud. The owner specifies fine-grained policies which are enforced by the cloud. The latter performs most of the heavy computations, while learning nothing about the data content. To this end, we employ a number of encryption schemes, including deterministic encryption, proxy-based attribute based encryption and sliding-window encryption. In Streamforce, access control policies are modeled as secure continuous queries, which entails minimal changes to existing stream processing engines, and allows for easy expression of a wide-range of policies. In particular, Streamforce comes with a number of secure query operators including Map, Filter, Join and Aggregate. Finally, we implement Streamforce over an open-source stream processing engine (Esper) and evaluate its performance on a cloud platform. The results demonstrate practical performance for many real-world applications, and although the security overhead is visible, Streamforce is highly scalable.
Starting Page	13
Ending Page	24
Page Count	12
File Format	PDF
ISBN	9781450322782
DOI	10.1145/2557547.2557556
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2014-03-03
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Access control Cloud computing Outsourced databases Stream processing
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in